{"Win.Malware.Dridex-9837879-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-filename-mismatch", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "artifact-windows-task", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "registry-autorun-key-modified", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "windows-util-schtask", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "windows-util-schtask-generic", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "cmd-exe-file-execution", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "modified-file-in-system-dir", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": []}, {"bi": "artifact-pe-no-dos", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": []}, {"bi": "sample-pe-modified-on-disk", "hashes": ["59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "hook-installed", "hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780"], "mitre_attack_tags": []}, {"bi": "pe-subtype-com", "hashes": ["6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "mitre_attack_tags": []}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Dridex is a well-known banking trojan that aims to steal credentials and other sensitive information from an infected machine.", "hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "iocs": {"domain": [], "file": [{"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "path": "%System32%\\Tasks\\Saxynmjuvrwbh"}, {"hashes": ["1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034"], "path": "%System32%\\1492\\mmc.exe"}, {"hashes": ["1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034"], "path": "%System32%\\5803\\spinstall.exe"}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d"], "path": "%System32%\\1193\\shrpubw.exe"}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d"], "path": "%System32%\\6511\\msconfig.exe"}, {"hashes": ["20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05"], "path": "%System32%\\8206\\calc.exe"}, {"hashes": ["20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05"], "path": "%System32%\\6333\\Netplwiz.exe"}, {"hashes": ["31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5"], "path": "%System32%\\4422\\recdisc.exe"}, {"hashes": ["31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5"], "path": "%System32%\\7962\\fveprompt.exe"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "path": "%System32%\\1613\\mblctr.exe"}, {"hashes": ["4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f"], "path": "%System32%\\2097\\DisplaySwitch.exe"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "path": "%TEMP%\\7tv55B.tmp"}, {"hashes": ["4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f"], "path": "%System32%\\3181"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "path": "%TEMP%\\GbXdhB.cmd"}, {"hashes": ["4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f"], "path": "%System32%\\3181\\msconfig.exe"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "path": "%System32%\\0126"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "path": "%System32%\\0126\\fvenotify.exe"}, {"hashes": ["6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5"], "path": "%System32%\\2014"}, {"hashes": ["6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5"], "path": "%System32%\\2014\\DisplaySwitch.exe"}, {"hashes": ["6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5"], "path": "%System32%\\9322"}, {"hashes": ["6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5"], "path": "%System32%\\9322\\VaultSysUi.exe"}, {"hashes": ["4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780"], "path": "%System32%\\1691"}, {"hashes": ["4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780"], "path": "%System32%\\1691\\msdtc.exe"}, {"hashes": ["4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780"], "path": "%System32%\\2072"}, {"hashes": ["4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780"], "path": "%System32%\\2072\\rrinstaller.exe"}, {"hashes": ["59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed"], "path": "%System32%\\9588"}, {"hashes": ["59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed"], "path": "%System32%\\9588\\icardagt.exe"}, {"hashes": ["59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed"], "path": "%System32%\\7671"}, {"hashes": ["59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed"], "path": "%System32%\\7671\\notepad.exe"}, {"hashes": ["8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332"], "path": "%System32%\\2205"}, {"hashes": ["8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332"], "path": "%System32%\\2205\\calc.exe"}, {"hashes": ["8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332"], "path": "%System32%\\7089"}, {"hashes": ["8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332"], "path": "%System32%\\7089\\tabcal.exe"}, {"hashes": ["92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "path": "%System32%\\1601"}, {"hashes": ["92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "path": "%System32%\\1601\\credwiz.exe"}, {"hashes": ["92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "path": "%System32%\\1128"}, {"hashes": ["92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "path": "%System32%\\1128\\raserver.exe"}, {"hashes": ["70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9"], "path": "%System32%\\6259"}, {"hashes": ["70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9"], "path": "%System32%\\6259\\PresentationSettings.exe"}, {"hashes": ["70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9"], "path": "%System32%\\2782"}, {"hashes": ["70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9"], "path": "%System32%\\2782\\calc.exe"}, {"hashes": ["c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "path": "%System32%\\0979"}, {"hashes": ["c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "path": "%System32%\\0979\\ddodiag.exe"}, {"hashes": ["c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "path": "%System32%\\0927"}, {"hashes": ["c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "path": "%System32%\\0927\\WindowsAnytimeUpgradeui.exe"}, {"hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96"], "path": "%System32%\\6693"}, {"hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96"], "path": "%System32%\\6693\\BdeUISrv.exe"}, {"hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96"], "path": "%System32%\\6578"}, {"hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96"], "path": "%System32%\\6578\\osk.exe"}], "ip": [], "mutex": [{"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "name": "{655c7ed4-095a-878f-8a02-ccacb7724214}"}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "name": "{3917e8e1-2ef8-14b9-d7e1-c05624d1cf39}"}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "name": "{582b256f-1b03-c642-c0bf-3f7f79237ad4}"}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "name": "{64cf9353-6088-82bf-8ec5-a884cad30e0f}"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "name": "{<random GUID>}"}], "registry": [{"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{26A899CD-F987-34AB-F4F2-73315FA3D780}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{26A899CD-F987-34AB-F4F2-73315FA3D780}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{96F3089D-9E34-6CE4-92A3-DF5F50118028}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{96F3089D-9E34-6CE4-92A3-DF5F50118028}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{9113AD42-32F0-3682-1420-9D5F3A7EE72F}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{9113AD42-32F0-3682-1420-9D5F3A7EE72F}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{74AA392D-80A9-310F-0EF9-3C32750B19EE}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{74AA392D-80A9-310F-0EF9-3C32750B19EE}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{03D08175-B48A-4379-3C87-E511E4A107B1}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{03D08175-B48A-4379-3C87-E511E4A107B1}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{3D3CC27C-8C03-9FBF-83B7-AAF28BAF56A0}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{3D3CC27C-8C03-9FBF-83B7-AAF28BAF56A0}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{340DF574-EFFC-1F92-6519-37F879D2A325}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{340DF574-EFFC-1F92-6519-37F879D2A325}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BC894FE3-634C-E885-D2AC-A013E878CE40}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BC894FE3-634C-E885-D2AC-A013E878CE40}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{AC6D5DC7-C1D4-D745-B280-FCF589E17581}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{AC6D5DC7-C1D4-D745-B280-FCF589E17581}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{773A15F5-5507-AB69-7992-97A12B3143E2}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{773A15F5-5507-AB69-7992-97A12B3143E2}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{77FA3E8C-33A2-53CC-55BE-2D3777C6E99C}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{77FA3E8C-33A2-53CC-55BE-2D3777C6E99C}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{60391D13-05E5-B522-2990-2996C2A4F217}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{60391D13-05E5-B522-2990-2996C2A4F217}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BFD0B0CA-F12B-2A79-A56C-5737D056DEC3}", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BFD0B0CA-F12B-2A79-A56C-5737D056DEC3}\\SHELLFOLDER", "value_name": null}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d", "1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034", "20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05", "31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5", "4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f", "4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780", "59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed", "6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5", "70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9", "8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332", "92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298", "c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BC894FE3-634C-E885-D2AC-A013E878CE40}\\SHELLFOLDER", "value_name": "{B891DD8C-4819-142D-B19D-D4FEEB8A8176}"}, {"hashes": ["8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID", "value_name": null}, {"hashes": ["8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\\\SHELLFOLDER", "value_name": null}, {"hashes": ["1077ec915ba38f63e674a7202b28ceda5ead1f3708caf6ab8e4b25e4eb30c034"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{317953FE-F346-9A17-86EE-B333F014C7C4}"}, {"hashes": ["0bf88f0b5995503f9a337fb583c0a63680887d7705548ec16011ccf08e87760d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{3A269038-7858-EF23-F876-D9CCBFC39CDE}"}, {"hashes": ["20551956bf207b4dade5540628813b67ed469d4a1ff11e0615b37b106cf44b05"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{56CC72AC-2D2B-E5D3-D45C-962C7FE37D98}"}, {"hashes": ["31aa899182a6b34add032325ded78a47c291837840882a253dc7749dc9921aa5"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{7AF6CC3C-9CEF-7E53-B190-2B6741239B1E}"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BC894FE3-634C-E885-D2AC-A013E878CE40}\\SHELLFOLDER", "value_name": "{EE899CC0-C636-177C-9A88-75212411A753}"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{058CB2FD-79E6-8556-0140-59AE4A3B6DF4}"}, {"hashes": ["4595ee910976e994317561e655603d0f49e64b571abc0352d6e61ee5d1d9547f"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{6A934888-C813-703E-C493-3E0A1A241651}"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{77354B64-6E7C-954A-05CA-AC07DBE12743}"}, {"hashes": ["29c8eba7f690811b5b216de74042e9e779dde8813b09a53a0d3cc4ce48e957a2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{E7980299-9D49-5F76-4FC1-CAE303CFE6CC}"}, {"hashes": ["6eb909160ff1aea7449bc78299b6caf55780c1b6980850b86d5fa8a95651a5c5"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{B0600069-4343-0EEF-CB74-AA37FFD6BF33}"}, {"hashes": ["4fd486bffcc06e49d36c33f90f9e13d8d82b76e0ceee63abc54d9ab2743ec780"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{73417484-CCEA-D64A-5BAA-7CEEED30E145}"}, {"hashes": ["59706a6392eb3db9eab455d8b251577ab03ae4fd9b3d86815bb7bca0f0d442ed"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{E4172D89-AC0C-625B-FFDA-0EDC471E2545}"}, {"hashes": ["8d07d944c1fa70c30f221b8eeb8b382c3b6ce494ddaa03c5665cca4012483332"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{DBBE783F-9CFE-50D8-8E12-CCF32E6CE8F6}"}, {"hashes": ["92c4e6097354d59030debb77a4a2a477af54344d4c3e78ccc98c0e28054eb298"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{2C338046-9782-FBF2-0C1E-55387D070421}"}, {"hashes": ["70a427ee2b5fed892a6045f3af8e2f1bf76a8ccb67255c3b83049c07ca27a8b9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{613B28F8-52A8-D11B-7D52-15FDFDF95869}"}, {"hashes": ["c10eecff3f896870d2dd313bf1d4eab6f1089141950bbd4a6d63e3d1429aa956"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{A2EA9CDC-2505-1900-BEDE-0A5BD02D329D}"}, {"hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BC894FE3-634C-E885-D2AC-A013E878CE40}\\SHELLFOLDER", "value_name": "{0F130CB1-3C25-B396-2383-5BF958D38AB9}"}, {"hashes": ["92f8c33e651d6c80577d4f2d487be462f04462fd3a332d8980f47fdcf848db96"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8E533690-D98A-A2F1-3C5E-FA6CE8898067}\\SHELLFOLDER", "value_name": "{F798B267-972A-1FC4-0298-4C8CF22A2784}"}]}, "reports_count": 14}, "Win.Malware.Kovter-9836073-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "memory-execute-readwrite", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "pe-uses-visual-basic", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-russian", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-obfuscation", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "wmi-process-create", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "TA0002", "T1218", "T1047"]}, {"bi": "process-long-cmdline", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "deleted-submitted-file", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "compound-vb-self-delete", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "excessive-tcp-connections", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0011", "T1095", "T1008"]}, {"bi": "potential-registry-script-execution", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "registry-large-data-entry", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1112"]}, {"bi": "powershell-invoke-expression-environment", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "TA0002", "T1202", "T1059"]}, {"bi": "registry-modification-reg", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "powershell-invoke-expression", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "TA0002", "T1202", "T1059"]}, {"bi": "process-hollowing-detected", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "files-created-batch", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "startup-folder-modification", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "artifact-lnk-calls-cmd", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "startup-folder-lnk-file", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "microsoft-block-rule-list-app-executed", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-shell-default-file-handler-created", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0003", "TA0004", "T1546"]}, {"bi": "process-check-virtualbox", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "malware-kovter-registry", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": []}, {"bi": "service-dll-registration", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0003", "TA0004", "T1543"]}, {"bi": "registry-script-detected", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "TA0002", "T1112", "T1059"]}, {"bi": "process-mshta-cmdline-script", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1218"]}, {"bi": "registry-ie-zone-settings-modified", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "mshta-in-registry", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0005", "T1112", "T1218"]}, {"bi": "file-handler-registration", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731"], "mitre_attack_tags": ["TA0003", "TA0004", "T1546"]}, {"bi": "network-file-uploaded", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-http-numeric-ip", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-communications-http-post", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-private-ip-address", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "http-response-client-error", "hashes": ["fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596"], "mitre_attack_tags": []}, {"bi": "nginx-webserver-detected", "hashes": ["7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "mitre_attack_tags": []}, {"bi": "html-small-file-redirect", "hashes": ["d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9"], "mitre_attack_tags": []}, {"bi": "url-not-found", "hashes": ["a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "mitre_attack_tags": []}, {"bi": "http-response-server-error", "hashes": ["04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "html-js-document-location-href", "hashes": ["d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9"], "mitre_attack_tags": ["TA0001", "T1189"]}, {"bi": "network-snort-policy", "hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6"], "mitre_attack_tags": []}, {"bi": "malware-known-trojan-av", "hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-obfuscation", "hashes": ["ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "mitre_attack_tags": []}, {"bi": "html-iframe-no-space", "hashes": ["0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "mitre_attack_tags": ["TA0011", "T1071"]}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Kovter is known for its fileless persistence mechanism. This family of malware creates several malicious registry entries which store its malicious code. Kovter is capable of reinfecting a system, even if the file system has been cleaned of the infection. Kovter has been used in the past to spread ransomware and click-fraud malware.", "hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb", "19e5c43bf311fe4b6b4c2f6a26859d104c7f9d6731bbad2484e188b591ca4a03", "19eeb5ae3034318104806af31a28d072b2f777dc553f2dea30add367bdaba44b", "1cf994240773586f5e74b7ea0491d5ded2f20b9639762fb6fa7a2dc5bd315cce", "1e09a63a7c2bb5805ec2867c67e95b00aa41cf21d4e5b9a42143d8621fd4caee", "2019c99350da68fd77e8a3e1849e1e427662a66269dda298fc76d35f51d38eb0", "201ac1a9c8cf404a5928c914e75671bb9086419a15d0e5f7b92e093674019578", "20308450a998b218a9b83a002109518fb8e1e8f50e0bd60e93c58332ecc17e6d", "21afa524dc4a4368b5f6ecc797943f0fe425a503774413291fbca7c0f4076643", "21c5b42a57b15ff77ed91fdf55da470b968b8994a218d373954eadec17acf85f", "244001c040d71f9f3b23d2463e0f1a7bfbff24deac5c7cabf207636764c9fed5", "267f2bedd7a6096a4225042bfa0907056dd35eee6e0f68d5e8534ca847520db6", "28721b0ee14986dc06baf5246b3d14a2013dcb49677a6d60ec4b3e21ddbc2c28", "28f57df369d1efa8d7d815d47665e30b6768175f498d5c5a43c6de2fd82f2eb5", "2affadc45cb1acf71bff04d8de88492a78d6512957d0b8f537f237b259eef2e1", "2b3e827b0579d00a76344604ffca94cd8576896be7c8a9514637fcdc93755be2", "2ba15c0c4f9006bd4425f48a7c832e7f142b5986f679e3b8fd9266e556ab1ac3", "2c3e7466d07e4b10a11f8608eadd0482cb16d4f0562823a77f201d40317115ba", "2d2c1c3a6e3838af1720552060da81773d3048a1d57227c0cced34644d1383f5", "2d704128547b854640305eaefc8251102b0d73972320fc3a5ef46fe0dfb373c4", "2df0c780cffe34f3421ca5e844cbb65ce8a243923e13336cf9e074036a5ea903", "2f77fe139c2f4b3104d0c38f6e5374770cb4b64c735b14cfc5080d66f5ac313c", "2fce7eac39ea9da0bc88dac4a2196dd93f608f88f5dba5cac097063ec06f3639", "30b295a34398ce9c2cbae244c3a3d0b2f2fa672c9acdb7a0188acf64bcf8ce5b", "30b88c098023190a950f2a569a1573fb46e3fe35bc2182773675aec9530acdaf", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "329aa86f9f0a149ecb6a81b86ce6f48a1b0d19b287f8b010998916519a82df9f", "32dbdfd41085a727c4b2cdd908cbd26404419b3b36faeaefef839aa40a308018", "34304db3d0190e0e8e9dbb9f9501f931f5d34098258e8c62dc2a3b7aa096b329", "346470ca797ca7d1191c01e04b78beb5401cfda51b0125d7a3fb37d84c2edca6", "3557545f9be06c3c1015a38043786d2f151b315787cfeabf01b553c5d80ec7bd", "357e9068ddefab92fd3db3d96cce97d642fa4a3307abcd44ae0e284d5d754ea6", "35b323c1c6770a715d6551aa2efc7f3d000847af584905c292c0ecb0050ed07e", "3613e3f8a52e9de3978e0b4d2703c3f9895ee36417edb3d70028710a9543c9df", "36891855cbccba06b416b756f13793e17779770dfabf0f14b1d8d2588345e10e", "37f941441b06b22b8d189056540e7993a65c2b72efede5f770d7f042e64a378a", "3a9520e6583e5ff0f7fab39557f066bf7501229f27f28a5ec5667e4c9ed9f3af", "3b9832d686b5d2be8d5dc8ab9effec43e7342daee20a2542cf2d4c4f3d0b18e2", "3bea489db81ebd4689a81cf4f5c6c7a44958179d70148c2cb07d83830573e977", "3c05df351c4f82d8db68377f6ffa18cf6b842ce90fa45ddbc0f3cea0d48881b5", "3cae3f2bba81bb24bf43371f79935c0fe816d85ec451e5e4b5ff209c6c1c6d66", "3d4913a553d29df68d72638a50b71fb6225da91229b16f91ecaacdcdf3d3c8e7", "3d8066d58b5cdce3047119e42aa742cb4b8010054efff67457815ac882dc1281", "3efbcaa8dcc901dff7b49bdb0e71ce44e57c5c92df5847ad687c9b09b64c2998", "3fa6c6f5095c6480d8ce18b184bcef9675141a85db52d80db1546637eb334bc1", "402066e2e7895f454d18db5d6dbf72c0f234cebda91533ce0b0dd0fe20d73af7", "416f44834e1929aa7d9a89faf88864ecad85ba1cc3b9bbc48e8706fb4061fa4d", "41a967bc638950446d1661557de8b16e94433d45d4211ec5521cc6ec75a4846e", "421de4a4ca9e63666cd6cef16a47bf38c2ae2a1abaacdb45a572f72fbf84dfb7", "424c0bb4504d2e4334ef4bc02b12fa0d4eb79432a5cfee0df41264bb3ce90328", "425f51ae5c6b54144169162008d31ff0f794f9b772fa3146bf1f267c60c2e8c9", "4378ce318fd692dfd43db8eaaba5bbcace9e1efa628943348dbad5934a9395f3", "438c1203204336a2984bbec7af1998d41082424035797916761aaaf239c11732", "4601150f392598a448f18e0dbb372ba3cded2ed0708281e448ea1ea611f8063f", "460babb52d1934652e8b1cb170b3e00823ae913194c03a55b0b0a9eb10d6881b", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "4857a6b1b72f8fae5c81c362c962d13a7d5b5aa0e6bfd8a511b1a9d1b86be179", "495e5476c4b850ad2fd62913aa35d29763fbc76131c8be0e303a1433361c0c90", "4a78cf04bd50a085de43ac8cc9e120766327fe98d8316420812a87e6446fb582", "4c7dc65eef78d4f06985afdef93b86544d5a4c8b617a67d0b41ba16f3c377bd2", "4d0ca2bd700728bc7966a1381109dbce345bc0ef7396b7828556a6557965a9ac", "4d2a81d13e80bdabd04f5f68dfb87d312c0cd7ee17f7da4ce5b07ff811fa62d1", "4e32dc4966228719c307f6a0ceea2fcc1a7185eba3a3f26d3cece1182c1bf7cf", "4e907cb92f1d56f8e064b5716fb3789ead4a1601e98ab29cc05bc53b9e7211b4", "4ed85f0317fe20dada072805e91a66b6e6668cc5c026c0a49878bf34add0ac0a", "4f60db4d7c37451a695befb1e4d03944e6078463f8351840613f842b09fe3aeb", "4fc559835edc2ba96de4fdbd78a55e8811912ce627b56a3e03844a6d08b68988", "50d802a33e955e2aceefa02b3347f1128733250d578eba61e3cc537669054ff2", "523ab9c698b5bc61d7ab31a5a88a01480f0f296f1520be1ea07c9a3a9bcf9cdd", "5302ec7c9e9f50b3f97a9160be603369709f755ed3367c5e88d3fa67872815d3", "530cd311fedff8cf94f629b2238884b1bba2933972e003a64ad8b9a0da1a9644", "54b2ca0976f9d9b49e3d131cc8fc669e84352f4a227f313dba29b8a7969e6aed", "54b403ee8c8706b65543898ff9ae447c087e89421dde36239046d6552edc6c44", "5591be19fa95f1386b65ad8c07cdbdb0448d8db6e7ffcafa27e093a9e95ffc03", "56e14d673ce6bf8b03aa35c6fe666ba3b4570e36d64a47c250a53c6b5416eec8", "58007d2ee3a05882839f032661cf9319086041430f99b90964dc3dc9e07e7f33", "584b06952295d7cb61818f77595a7287d565522b927e279bae2360d9bc0ee861", "59634e32cf5a0aadbbd3262dfd1811d6e87f0116e92db5ba06231757a7eea3cb", "5ad771dc8979ac9aea235bf9599db4b6e5304766e2033081b803e02dceafb064", "5b5fd13b9b9d31f2a73090925608cb4cd5b84fafc0b52662186bc8f3bdfdfeac", "5bc65f42c596dbb2c1dff7c01bdcde23b1df003e5563f54ca77ed9ecb292c2b2", "5d5abee0c4b38db380eb79b61a6cbf6046669cd8b3e4c8dd608d7e54776976d4", "5deca8943dfa79f4c3eb8b01a9a78fa6085f0c29102c7fd15b5f1687c094d35f", "5ee2461fbe769df28b2a5da505f2db7f498c553b013d16bdb24623fca5ea6006", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "624f882e3cdf8c2feaa9dea2ccbb2c7c50a7b0619ea725d0fd3ee3ba7d22cebe", "6277e232f8816f10cee123a0b6ba96bdffd0251533e039f1cf775534b9e9586e", "62de6e2578535d98f76568df8b7fdcf49f125fe13f8a9d7635a61f60f3bdaea2", "671d05036f1e56b3d662d52ea423a80b72e7fc7dc5cff470a7cc805654c3b113", "67b1fd618c561adececfd7d5ba180d13d4b84bd79d70319babf53179c3c9a8ac", "68cca53ed6e497d350c783977a428ffb61c73df0295f285bbd95d5cf6456c13f", "693dad7544aec267ab417c9df3d19ec84d8387015358379cc42dec4fbec63d75", "6ae1ca2f6f215cbf9fc700ca9aecd448cf30f8fa035d5955c9734d5e8ec88fc5", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "6beee1d5231e368bb716186e6208f564e4fad952af2a30849657eee344d1c152", "6c6ff4f5a449f540d364632dd99017f324de29afc6a40fb3f8de4a18c7864288", "7116fdd51acf63f19cb62a9af3916fd48007893f527b9877f394797d549511ca", "73b969e78e56e9b58e85887b6c6ebd0cb9ad19314f459ade43b3605366cb9ac4", "73c6c7b9b3206e0385b7f25265301c9be7ee4c689dd309afc4406157bf1885f1", "7490bd71832058718cf095774baa6a9035792a7f1f1cc0308dd88ff249b7f0a6", "760ca1856eab949c56b6231cfef933a3f90865baa027731752ebc13c5171f80d", "767ae1369541f321de9feeafaaf401f396ac35c8f1bdb24a6bd5430bd054b221", "77ef20ad05a6fc863feaf38ce8bc427b11a7d65ab8dc38611e5f3ab81687aef5", "78dee0295071ce147fd1791752f79a13252ec8dace622bc96b48eaf15c46ee31", "79923f642efe3f655a481e05a1823ee60d875da78fe654d07c9f6515c9eb19f5", "7adc08797aaaf8b0c6910fcaec72b68a054e08e6f04953459f241c69490b691d", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "7c2826ab36f5754c06ce7458b11ce4e2767a0986305b5c8747f267151dad7162", "7c65e5b08ea69bdbcea9bce19d735c957297674c078336ce6d7a5802bd5c2d01", "7e1f27a43eed0ff924cc119d545dfb54b1b98f2fa17f88db926d40cd248f612f", "7e21d418676c00e8cfdc791932dcfb391e9a39706059e18e7237122eb6da7a51", "7e76e3151dc6a72cc10ce74eb8454120d6327516ece0e58c6c312f0855d32ae0", "7eba07f3b4c158a5059dbf40ecc0a2100fda3a8d321d1f5f1b40c4f1530d6e8f", "8027aab89531b24275018e087b31fad57e6ad6e2bde28118f079c4b2c625a815", "8195bf5bbe28ec42864f0174582dc659d1ed30ffa2e9ce64815133d0f88c673c", "820c4a7ef7250b249a31d274f6e5fca0803ace82d2ee7b96b043944d530e5f60", "8369d3f0eae7b96c76e2a36d792a7523a2033abd8e49815db283fd2b2a26995d", "838fc9470f36d4e9db8b52603d076488f64310f6dada37648be5fe1b7335d895", "83e2c8388c6ba90e2c43641f18ff8bf224d0f6af96c74efc604b51cdcb4395b2", "84f9e299b53a515bd6adcfe6a5dc359ec3eabcec0dc1bf86f691c6fb04d1d71c", "867edda382e72b02dea778a0fa41cffaf955f3cb2ccebd02e1079db101ca033c", "87c75b77a47a5a2de005f886a4f3739ffd30ac9b2a7b193a0f26199dd67bf52c", "87e8f27798ccd6adf15c19b7cda87ddb46954d133f9a88176936e76c72d08cf4", "88e7f3c952962f67ffb3f87d04a1a7ff7fa68696228497efcd5ab6ff6433a843", "8930160240ae233d19191791b759d352f7df241d0163ccdb3c12b37ebc4b82b3", "894648aada513ba782c12ddc25211f72fa927ead85044b19db6d590450e18801", "8a9825102506b5c5423d0599414d5bdee5232846883452bab3b6909162e6d1f5", "8b4cf6ef4c98e435a7d0cb25d8237d8b5e1bb3fb4064d634576cc9799cd66e6b", "8c49d13803208daf691d0b3926fe5e430491faace80adfe28bd62a95430af2a4", "8cdeb927ea088d6c4307f12fed455bc9962e0b750152566c4a97abe73a4ef891", "8d0926ba4c5d139f6d5a3b464144fda41aeeb65cc2a9fb985c75da47a6b8aee1", "8d30d6e5fadf12851d02e044d980648fc687c72f886cb5a6dfa1f00f91b8f63c", "8d6f99e03d80ae07b90aff2213dd1c707c96806fed52c0d5aeeec816bd2021a8", "8d77a18e0636f6a31f1565cdd247a6db9a09243d534338e4f1f0157c67ce1a2d", "8d983fd0a662d3b140cb688e54c409e934e757da18ecef4f7021b9986b80114b", "8e0d956577b09e56c24580f797a27af0a501324b2b795286eca96d70dfb77e72", "8f312240a82b473dfc4bd079930208d868219d8d0a0ce2f14cf7ef78cec1d711", "8fcdec41d81d06329bb0c50af4807a90ca97ce9f3abcbdee1baf5d5939799acd", "8fd6e86a866ae24041170680ef8107cd95130a0a3cb178bcbcc19f0f9cbc5607", "9092b8f2249884ba6d7f132aef0abe337e51fb3397250dd512979a9c9ea38192", "90b352492580eef1a7a90d7bfeb3561b6ebf5e2d43cca76748075672ba427669", "90b650cf6587e4b05007b1966a0278b30c4f1d0a552e5bad05a5a4a512d71fe0", "91f1aebc2b0ab5b7bf1b733ce9fc1728dff4b7eddcc2525cb63454d53d3828bd", "9282a41d28b9ec503f0613c08b3e012cfce2bce11bbefb565ceb999b3efb373f", "9341070eebf422ec697018962de100bf4959302fa77801bcadf3e780e5049594", "93f21ba67fecb137f9fb8a0ce8a12816d23e478024fa99530713fed72d7fed04", "941c5bc7bf22c0ef38f1286e82c99f2ae4584858590df739fa93be19a70098f6", "9506c8da4e1ded28e10eb02c05f0f0b1db12d59e25e0bb005a108cee540688a1", "96d67bbbce982a2f3bdb8369cc1ab5dc2acf8dd849b4d1620b14ef6ed7975147", "97abca038384b1b679381ffa625344d2fc7e431c5e275f0c063667aa9298ed33", "988d280901717e3028deb06daa3ed69ecf4d18b791c2245838d3ad23d5aa6338", "99907bb17cf7f48b3f71393a3ddd430ada1663f52dcac70a3e508725005ca50f", "99df37734904969749567758f5fc863790252dbdc19271382d0a3e0fcf61ac52", "a0cbf9fd0735a6c08ae9442bc99cfa9274805e124b182a7c489b03980b8e3701", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "a40f1e109b3e68ea4875a8e918319abce5e801eb5823ab3d08500618a57ff4e7", "a4637eba384f885acb3aa6b5d6d7c028d4288144d5b9f1449a87c311434ace05", "a62a2c2d2f06bce22c1dedaeaa108ef65f362bd58e1a8513ee69297e763f5789", "a63f07fbfd319c691e4dc76ff9e51a60a6f94e276ecf92cf84cedd5013fd0110", "a80e2397b6ea246775b6b10f91c451114e285c5459becd73c49cf4969f5997a9", "ab36e605f6554de7c6ec09f67487e31c6988b39fbd77dd3fa2a23a9af4d5c78c", "ac4f74b8727caaa7b5e90f5d1123b7fe4e8a987a030fb61fafc76f93a7270c63", "acb1905ae7ab9c9f59029899a0dbc7e9681738ca79f84c071bfc09dff42e058d", "acc8fbe10d563e53f623feb1e1e43619294d29303ed174e9455acbd43923d02d", "ad81d48ce0ec5fb3ffbb59208c30478641db731edfd7f5c6d62f610df8ac311e", "ae5c3f0e435e0b587593dc5209dbc72f4dc0443da81feb01aac993cd39714fd2", "aeee060ba6e47b37116ddbc1dea2996e53f3e60067d18e5db8b8ee1b5ebfd457", "af81276d956a8c67478e8bda5124a017db256adee53dc92130f06a07553136eb", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b055868b508172157e23ddce9ae2e06eae50f094d142eda4f79cd9c9a885779f", "b0ed5ca22694c578c033bd85c02d691f06fd21ba7e03043fd3c5fd8ee407ecc8", "b10cd8a2bd03647d4d9a3dc4740d80d56236d34130111779e5e8af819f450c83", "b1b8eef45504f9177746cb7dd4402ac875904c763a1c5071a3a617c0f1705dd9", "b1bf3e4931c6ab5b324e827006b9010d9af55be65e5f63126f007da4f0d22c2d", "b3563fa29920025ba9311df5f946931268a4658db0ad4b73cf179a70076a71fc", "b3a625f7edf04c6aa44313032d5745c1f641fae43dffe34ee44b425ee5987349", "b442377a6450221b393c7f81bc664c0933bdcc4bbd4d52ac274b5dd4a4714622", "b61c01d1d7d21d92eb31d3b29b18092979e04f3b4edc68a0f24e36ceaa0d508a", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "ba92557f950ae3dfc474ebfecf6bfc69459f03cac924a67539dd38612ba1e297", "bc5ccdca74caf3f4476ac32387be09baee0381c7e02dd977c5c459153dbb9f45", "bcdd427a726dcab7d326ec388de467fcdb0719df1f639612e5f90d17422d8b73", "bf965ed02e6384d3cffa39aaf2f4249480bc77ae64d07c7f0a71447179acc22a", "c0858702e92bd410e6ec892e4ed82755f6b0e1dcca3d00efbb41bdab24e9df04", "c23c0beff67b800f428369a283c08dcde0a14b5495fd0b206d8a5cc31ff665b3", "c2962b4c4c679299598110d8bcd1e7d3b9ab34bb1726e8a079ab170fa89ecff8", "c29d949786f254295cb12cff7eca6954d5294d022e7c6b6af0e6d893df3fe288", "c3e1e31b2009cbb13227991932b33ee81ec899499536eb3a97c6e3dd4aa48c47", "c49f4c38b2aed84eb0854cc5704b05e732ededa0f875c9d84c2fd876e6f43467", "c50ca76fbe47a2c65c187a7e84c9bd5a4ed4f82ced9b41179b5c2fdc6679a798", "c61cf20c1db35b2bee916625faaf3a245912cb25d663a28b0a7cbaf153f01993", "c6dee61ff95e98d2ed2cf695adf7d9c221df31977879cbe94c6dfabe560bfa95", "c6eb11ca0b8f38727c2ebffb6f65de69fafe205bbd217c0e526233346dbd71d2", "c828614215331de0439dc2c31d8c3eb4e3bd37bc932ae63a251b9d9c641426f3", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "c944efbfbc2cb2922a1dc14d74cfb02b204fb0aa7de7504ca5d33f258b13e8aa", "caf6330056b9b2dc60f78f5d6ff84bd533bdec7e332a071ed9685cdaa81b98aa", "cb3349d630d0a37c8f1aa6fceb04d2f66cae559d4ac7e5273f6abb896a04401b", "cbea18ff2a49cd89e1eb5dd6609a1314e222cf9fc862152bf3ef8f0df7c29ed5", "cc02373c438daf476e0b2cdb70af3eac608a0a5b44fb2dd2891dcb5ae9dc170b", "cc693177dc9c720c6d3885e65106f951a6636780bce04c70664c6a65d2b9d0a6", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "cd97f620f19641b1b99ecdc6a2d3abe891b20db60df40c58fbdb66a297200178", "cdf4549885f2535a5ac3a72c24a0dcfa6ea48c9793dc7d502c119079a2253bbb", "ce08540a71887fc9a5a915282a1731908248950fa6311a20c057b4b385e80759", "cf91a9dfc205d3a97462aba751433dc27f694f7516a376596b05e1cb81fc66d3", "cfb40da246ae0a168465f26c6f4db77dbe8f39b4d070fa7b2812e26c810160b7", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d14880c16fea0be7770e83154251cfa913cd6d949f6e35c3bfdf246c60f01f8a", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d31a5314f06f42dc7c3fe22db814c1bc6c062360ef96917209a21bc68116f9ed", "d3debc6304f9e5869925dd4a929efcf27f2991f1667aff5b4dbaf9591b84f937", "d40cb6bd946a543310568d676f4e237766860a3677fc599e1b42107e7559250a", "d4f540a713e6a4781b434d4c0f2ec57aa52d2f0c823e7857d8f739c12ceac351", "d50d3fd0e2a4c79bd5f23e56ac2adde9748f077919f03b685e50b9a09f371d56", "d54bae34d456d011a2906be7b20f6016368d74cf7e42451fc86a343b27ebdc8c", "d5b9d70702466810e00bf3238ca98fbc47da0e94eb28f611db4e52b1ade9a588", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "d67b3d87ad93858ec278eb73a5052bdc12fb47d732f683243b8f1c2820bf9162", "d7e9985fa234d68757223210907cab9f14ef45d8556afc92e58d5dd17eb888e3", "d85d5f69be08b6408e13cd4a2e88698c5df832508c2f9df93d7cd96802d5c94c", "d9294b846120844a0bd52076c0e97bf5ea4d4a40d6bcd6891503de8ee1e309d7", "dbe966a2b7b7711c0f2dc3e02cbae8e487c679875779e0f451931b63554e5189", "dc00a96900acda921eeb7d7b20fd20f6a8c6bb5d5bec3aba5c570ce10cf0b4b4", "dc13f2f8cf6c0f0531524dd916c6936d1a250d27b8fb9208d79bda1eb44f2832", "dc6cc580b680f0cdc8e7b58757db1849ffd0a67bcdb0e1eb97fac9e912e83ea1", "deb2c7ce04a3b1ed4c34f3d26e119d568b3754779244aae222bdff47b3afb155", "df2e4cab6565c6c4ce0bd38e9fd11e7d1fca69e971ce122c69087c026e767a0d", "dfba1e9c3f0f7cf5dfd875ed1108e0a1f6f26785781f11dce47ef4e6a5ae637e", "dff24170b127daff75fd182c478b7b47d41a84f49f152c73f96e7aec378bab57", "e26b27f5fb5ec9e5b5b4e87cfc360c47e175b8effb5522bf66720544781f0d65", "e3afcd912845f2bf127acb550d5caee06370f904bf26da7f5affbf54b0dfb062", "e437b442c245f2da2201fda32f90fa5a4fe106a29f44da4a2f5a75b93823e041", "e461f0064a1157c3e66687521e5e2128f5d5615e15241f5e350fa40df581d3f6", "e4ce396313331fd356707acff882e8fa50c700bbb23a1ddf5aff19e25285b735", "e748482ee6e2f8bf4aef1bfc51fbd1bef40273163e0444007bb1e36ff4b400ef", "e7bdd59717d6f46383c8c3a5fd57dc66c1fe06ae8bc26c5167dc7594d21a928c", "e848a0439217c1ead8dba4a094890bc99854ee937fcf56804843c29be2e41b8d", "eabf19a98e599a6982519d2e006132bbd855f38e7686064726fecfcbf781d2c3", "eaff125f8b410596632daa9c35353d205b6951de416817a7be634b0dc20244f5", "ec20b696ab91b4a2e545a7a4f00567dbc1f6d4742215c3c628910aa7c362b369", "ec36faa11ea4d83365a46ad434361e770c4e09be00d219fb98b4b6d031313010", "ee9bb5368a424da9778dd2a2423b02b03f834c041fbc800e98d5cb5b5fc703d0", "efd3188fa299cffd57c90f9dd01bf50ce4a7f49aee07ad699e951fdda1e3ad94", "f0ada0d730f37166175c014a3b985d62a5c0592002d899bfd83c539adf0c7cae", "f0ddab84a7526138fa6f3168184d3ad32be1a771ae4b5db1755a6a10abf767e2", "f10e4423049951c1873d68291809e358b18232aaa7436952e94bfe9f7cd95f8a", "f12b96cec00bfa433bd1d486879ce75e476dc5517e637f2789c22978ae9c5f4d", "f1e7066a605d375f6e749422fda6090e451cc8df24ae4b7de97abfc315d7942a", "f2814b1521a9a4c50f4ee1ddaa5c40226380e918d5824f13e41e650df0622c4a", "f2824daf51699a83bc71eb9dcb26c9771c0a85b663245fbec06678b4b027b988", "f6c4e57bef61b92737b6b5270e4e870638700fc63b8fc1a0c04db9fc4bd3babe", "f88272f634a50cb884da999cf669a76529652f156ea20aaf984db92edef26977", "fa90dcc3b93bc518c8203b37fd156f8c0a75656ed1148a011b6b3cadb754b422", "fadf0d40cd61abf9c7bd0f37be9310ef361a5a9cf4ec72fce53b2e7e5a23c7de", "fb21fb67d4a4148831cb965a9aaf9b1edb1c42d9dda55caa98d61a328871c039", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef", "fc5cb27194ddfa3fcc7f3ae365b7b2ee53e8bacca5c88d6cecb83edb47c3a292", "fe2ec46e68e66fe96fb68e5184d73bb7f274cb5741e732538981dc5941fd9e4a", "fe467cc12bea45959ed6e7347f8dedc41b74a9d5a25486915f988b0e9b83bf85"], "iocs": {"domain": [{"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "www[.]w3[.]org"}, {"hashes": ["0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6"], "host": "fonts[.]googleapis[.]com"}, {"hashes": ["0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e"], "host": "www[.]facebook[.]com"}, {"hashes": ["7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e"], "host": "forum[.]odin[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "cnsglweb[.]com"}, {"hashes": ["7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e"], "host": "kb[.]odin[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "dsertui[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "energykoss[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "giko-ppe[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "gzkuzhi[.]com"}, {"hashes": ["7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e"], "host": "www[.]odin[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "jiesenauto[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "jtzdsh[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "kezke[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "lingctea[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "lytclyj[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "lyzzjd[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "lzyygm[.]com"}, {"hashes": ["6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6"], "host": "app[.]quick[.]od[.]ua"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "mybz88[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "nabhzq[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "nanxsf[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "plancul978[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "renshengdl[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "shoa168[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "shsongqun[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "shxs88[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "ssp168[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "szlhb169[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "szwtwyl88[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "szxslsdzx[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "tatallyjoy[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "wanboejb[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "xiayingaoke[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "xiuku6[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "xyqx88[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "yihen4[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "yj-virtue[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "ypgtfj[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "ysbaoyan[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "ysny1717[.]com"}, {"hashes": ["c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446"], "host": "zhungaotv[.]com"}, {"hashes": ["089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078"], "host": "cnstudio[.]com"}, {"hashes": ["0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6"], "host": "elmarievanzyl[.]co[.]za"}, {"hashes": ["089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078"], "host": "www[.]cnstudio[.]com"}, {"hashes": ["0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205"], "host": "2mnet[.]speedtestcustom[.]com"}, {"hashes": ["0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6"], "host": "www[.]milou[.]co[.]za"}, {"hashes": ["0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205"], "host": "centraldosassinantes[.]2mnet[.]com[.]br"}, {"hashes": ["0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2"], "host": "opencourses[.]uom[.]gr"}, {"hashes": ["0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "host": "vh64[.]timeweb[.]ru"}], "file": [{"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "path": "%LOCALAPPDATA%\\4dd3cc"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "path": "%LOCALAPPDATA%\\4dd3cc\\519d0f.bat"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "path": "%LOCALAPPDATA%\\4dd3cc\\8e9866.8ca9d79"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "path": "%LOCALAPPDATA%\\4dd3cc\\d95adb.lnk"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\91b4e5.lnk"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "path": "%APPDATA%\\b08d66"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "path": "%APPDATA%\\b08d66\\0b3c0b.8ca9d79"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560"], "path": "%LOCALAPPDATA%\\4c1c13\\2059f9.bat"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560"], "path": "%LOCALAPPDATA%\\4c1c13\\648826.59ebfae"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560"], "path": "%LOCALAPPDATA%\\4c1c13\\81905c.lnk"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\f1cd71.lnk"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560"], "path": "%APPDATA%\\ebbbd3\\2feee3.59ebfae"}, {"hashes": ["5302ec7c9e9f50b3f97a9160be603369709f755ed3367c5e88d3fa67872815d3", "bf965ed02e6384d3cffa39aaf2f4249480bc77ae64d07c7f0a71447179acc22a"], "path": "%HOMEPATH%\\Local Settings\\Temporary Internet Files\\Content.Word\\~WRD0000.doc"}, {"hashes": ["5302ec7c9e9f50b3f97a9160be603369709f755ed3367c5e88d3fa67872815d3", "bf965ed02e6384d3cffa39aaf2f4249480bc77ae64d07c7f0a71447179acc22a"], "path": "%HOMEPATH%\\Local Settings\\Temporary Internet Files\\Content.Word\\~WRD0001.doc"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "path": "%SystemRoot%\\SoftwareDistribution\\DataStore\\DataStore.edb"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "path": "%SystemRoot%\\SoftwareDistribution\\DataStore\\Logs\\tmp.edb"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "path": "%APPDATA%\\904327\\acf971.5ad8d0d"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\d23b56\\48c11b.lnk"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\d23b56\\56341e.bat"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\d23b56\\8ed9fe.5ad8d0d"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "path": "%HOMEPATH%\\Start Menu\\Programs\\Startup\\8f3c0b.lnk"}, {"hashes": ["1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb"], "path": "%APPDATA%\\9ac7ed\\61cca8.ea440e1"}, {"hashes": ["1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\45f0e7\\45342d.lnk"}, {"hashes": ["1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\45f0e7\\ec10d9.ea440e1"}, {"hashes": ["1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\45f0e7\\fe1ec5.bat"}, {"hashes": ["1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb"], "path": "%HOMEPATH%\\Start Menu\\Programs\\Startup\\781d5b.lnk"}, {"hashes": ["5302ec7c9e9f50b3f97a9160be603369709f755ed3367c5e88d3fa67872815d3"], "path": "\\~$7532604.rtf"}, {"hashes": ["bf965ed02e6384d3cffa39aaf2f4249480bc77ae64d07c7f0a71447179acc22a"], "path": "\\~$2535515.rtf"}], "ip": [{"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "25[.]126[.]223[.]94"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "172[.]219[.]191[.]78"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "154[.]124[.]89[.]43"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "50[.]201[.]234[.]108"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "64[.]1[.]173[.]108"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "101[.]89[.]123[.]236"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "120[.]228[.]214[.]23"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "173[.]35[.]251[.]36"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "42[.]183[.]152[.]183"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "138[.]87[.]206[.]58"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "36[.]211[.]14[.]156"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "45[.]46[.]255[.]251"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "186[.]252[.]253[.]93"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "169[.]204[.]55[.]207"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "77[.]237[.]94[.]202"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "20[.]133[.]243[.]96"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "82[.]79[.]248[.]9"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "86[.]76[.]17[.]161"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "15[.]139[.]129[.]226"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "100[.]51[.]110[.]169"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "47[.]243[.]226[.]102"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "106[.]150[.]229[.]88"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "117[.]145[.]147[.]15"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "90[.]197[.]198[.]142"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "67[.]190[.]169[.]26"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "98[.]123[.]134[.]66"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "150[.]182[.]9[.]77"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "7[.]250[.]41[.]67"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "37[.]12[.]231[.]43"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "117[.]157[.]213[.]66"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "85[.]211[.]203[.]102"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "99[.]158[.]225[.]65"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "55[.]245[.]126[.]60"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "144[.]88[.]135[.]228"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "86[.]254[.]53[.]2"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "87[.]161[.]131[.]225"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "79[.]126[.]184[.]181"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "96[.]163[.]22[.]93"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "137[.]46[.]37[.]44"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "169[.]44[.]83[.]205"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "5[.]57[.]204[.]154"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "176[.]251[.]187[.]127"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "64[.]61[.]102[.]117"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "139[.]110[.]137[.]197"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "35[.]121[.]206[.]108"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "42[.]176[.]109[.]124"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "73[.]159[.]24[.]174"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "75[.]124[.]93[.]23"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "186[.]246[.]127[.]62"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "ip": "188[.]157[.]216[.]153"}], "mutex": [{"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "name": "EA4EC370D1E573DA"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "name": "A83BAA13F950654C"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "name": "Global\\7A7146875A8CDE1E"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "name": "B3E8F6F86CDD9D8B"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560"], "name": "563CCFFF6B36C3AB"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560"], "name": "2070A5364843D9D3"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560"], "name": "Global\\B2A01B9EB1B404AD"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "name": "Global\\B8F225B5B0E54634"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "name": "389405CE233FA3A9"}, {"hashes": ["b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62"], "name": "2F37600C5F8C3F9D"}, {"hashes": ["1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb"], "name": "A08BFF3092227BAE"}, {"hashes": ["1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb"], "name": "Global\\B703B3D0A98162B8"}, {"hashes": ["1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb"], "name": "65191B950B6CB0F7"}], "registry": [{"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "1904cae1c2b5bf307c780e3e1ed727667f80270a2b1633ac925d79dcb35e12bb", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE\\OSUPGRADE", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE", "value_name": "DisableOSUpgrade"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE\\OSUPGRADE", "value_name": "ReservationsAllowed"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XVYG", "value_name": "xedvpa"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCU>\\SOFTWARE\\XVYG", "value_name": "xedvpa"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCR>\\.8CA9D79", "value_name": ""}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "\u0000vrxzdhbyv"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ssishoff"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCU>\\SOFTWARE\\XVYG", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XVYG", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCR>\\C3B616", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCR>\\C3B616\\SHELL", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCR>\\C3B616\\SHELL\\OPEN", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCR>\\C3B616\\SHELL\\OPEN\\COMMAND", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCR>\\.8CA9D79", "value_name": null}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "\u0000fcbburq"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "\u0000fcbburq"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCR>\\C3B616\\SHELL\\OPEN\\COMMAND", "value_name": ""}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XVYG", "value_name": "svdjlvs"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "0594ca5c45ad2066ad4543d88b3e9af0c62e73b57c45e2a26130d347d07ccca5", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "106137482c7dca5643b0ca31e739e636a36a037b765f8216b3168b421c832d5c", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "1641a9b81d780fc1ac95b3c2c8e0b7be123b60067b5c0a70b94cbdf1d3009731", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "4725df26878cff127f554da0f4722466c49054cd37c75ce20e562c397ecaa6b3", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "afe370f975358c055ea88264d897de0e49cb802a99955668414c0129389b1ad9", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d0e1cba9ad25f49f53cc904d791418e58a8fe33579bcc00da0a339918401d27f", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCU>\\SOFTWARE\\XVYG", "value_name": "svdjlvs"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XVYG", "value_name": "lujyoqmfl"}, {"hashes": ["020d09366a209f05a7bc5146d97f7157a3a1b88e163e43bb43f30bc53d795318", "02b455c7729d0b99c5372b4f79e5376bd25bfa75376ed0d78c2d89e48376eef7", "04adda719218d6d431391642be82e4704be293201f9b3a290c07dcc39c34bb8c", "04f6ff72641cf8f83a309c051cec116e48929a9703dcd06d5dd702065abd9138", "04fd5038bebe2334ff1f0cc86aa53a807dd05331204641d5dc975a45ba42c794", "0542ae95b82a454336bb8496820f09f4e69f89e903b7caea4a52c9b09da283b6", "05e8a849dd4bd74e792e43b842b40f188b7cf20a7793042e6873a7a1cf29c613", "089f67d964b442a3f4a8d38bb26b130ba53d06b5b43f3d6d0226bfabbfec9078", "08f5e00ca21ea9bd69bc8b508ad0fc59a31cefa2f45659232808b634f8696f1a", "0a20863459b05a2d1b27e26a4398f8adfac3af3c8dfe9bbdc30a2b9166f6e7d9", "0b0fc1a252cd670bccee167e9b5f627b0968fc3d9cf06e03212ee260db0f4205", "0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5", "0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596", "0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82", "0e95885c364fbdf977deb9018e29e06c89aabcfa2a8a8194a0be7868f5573aa2", "108cb19d599b5e9d2e6be046c88c712c26496b0a51dece6d1f407cbbd21c8a10", "12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf", "128e45adc12d22fa79558f34a5f6482ab0475264277b8eebc4d32176170098e7", "1446a1eae8e0e66149b75fc79fc00f240135daa1a08e8fc4e029089f283236c4", "14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407", "15d5683a3d3611d7e3092ed5b1d82afb4538809d8aa45e66f0cc90572ae40098", "16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9", "325dfbb166bdf83bf21fb9d0c80d1d64c6b36a519f2599a9bc3662a162d2c403", "604b3e899f5803d74161dcc8449f2009ee754e956e5d1d4fe555f027cad5e3a7", "6ae3342bad8d2aad1d66b0cb27044c5a5d868fa48d5f2032269c836473a9fdb6", "7bf794681ab0e3669238d301eaaea9c853a56d64adfeda0f3c66bdb9e31a217e", "a165b18592895f96d2f6bf8bb86969e3b851c9f54135d3d082b5217fe19a4cb6", "b7164153608c0de093041693655b1d3f2274e6b20630e09eaef00d65c8b5bc62", "c8b5df27a274d3d0faabbcc1eceb78fbda6863de84642c7cf6ecb6273895edd4", "c90966e2cebd52e5ac1c1069dc3f2fb1cc79e0f68deebddbe5be36cd78ec9446", "ccce24b5eb93932375210b114eff10ca57341a879f4e733e25853d5cd10232bd", "d161cc8213bc0766349973d9373e81072f7ba4a2f87d12082e52d3a996cdf25b", "d659234b3320a459cf445eb6fabe47c6c498730fc8d0ae92d2488dffe37a3560", "fb8c4a19c19538364cfe0ba3d5881322413c0769b58b6927e6418f20c71546ef"], "key": "<HKCU>\\SOFTWARE\\XVYG", "value_name": "lujyoqmfl"}, {"hashes": ["0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\FB214BE004FBF1E6B", "value_name": null}, {"hashes": ["14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\01A82FF7EEB313A452E", "value_name": null}, {"hashes": ["14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\SZQ1JLAYR", "value_name": null}, {"hashes": ["0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\ND1Z8NCA9", "value_name": null}, {"hashes": ["14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\01A82FF7EEB313A452E", "value_name": "DFFA1F28C98C8BE8"}, {"hashes": ["0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\FB214BE004FBF1E6B", "value_name": "368CECB5CB9C8A0A"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XHIU1RO", "value_name": "UOJAJEZ5nt"}, {"hashes": ["0b8f86244feba1a2df40037a1e6875440ba3e18132c851cd37b72991d6b4d596"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XHIU1RO", "value_name": "DNnN4h2P"}, {"hashes": ["14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\SZQ1JLAYR", "value_name": "VaQbuXs"}, {"hashes": ["14f8063a4b412bfa88df7d618d1ace8e6af0153615c93b29b25987287a959407"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\SZQ1JLAYR", "value_name": "aksjpcjG"}, {"hashes": ["0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\3F368A625DCCF979ECD", "value_name": null}, {"hashes": ["0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\77VNCMGBK", "value_name": null}, {"hashes": ["0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\3F368A625DCCF979ECD", "value_name": "0A161AB4D80C42B2"}, {"hashes": ["0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\ND1Z8NCA9", "value_name": "CNT45A"}, {"hashes": ["0b783ac57d4d913abafed298ad08ea277d8499e64ed26d5befb7880aa7e0abc5"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\ND1Z8NCA9", "value_name": "XfVSmtt9W"}, {"hashes": ["0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\77VNCMGBK", "value_name": "hu2iHOI"}, {"hashes": ["0e73b3f6f370152a7f968e937f0a7121d6b1835cad262e17c7fb43f38e11cd82"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\77VNCMGBK", "value_name": "cX4XEW9x"}, {"hashes": ["16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\15B97DDB6A24B5319C06", "value_name": null}, {"hashes": ["16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\KFGM7HI", "value_name": null}, {"hashes": ["16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\15B97DDB6A24B5319C06", "value_name": "C46EB63F5467A1A6CEE0"}, {"hashes": ["16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\KFGM7HI", "value_name": "Wa0lxgdZc"}, {"hashes": ["16eebf4fb3943ac423f8dc0e0577e9606a5c903185f708065689763b01f82cd9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\KFGM7HI", "value_name": "rr7xotK2dx"}, {"hashes": ["12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\BB4F48D0C94CE21FCD", "value_name": null}, {"hashes": ["12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\62OJQIXO4N", "value_name": null}, {"hashes": ["12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\BB4F48D0C94CE21FCD", "value_name": "548E6EDF7F73C6B2AE6"}, {"hashes": ["12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\62OJQIXO4N", "value_name": "0FbcD1"}, {"hashes": ["12643935ddac6432c072d4d528254869f4ab74c2222d510f88665753c48065cf"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\62OJQIXO4N", "value_name": "qFBfIERk"}]}, "reports_count": 44}, "Win.Packed.Razy-9835522-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "hook-installed", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "dns-excessive-domain-queries", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "excessive-dns-query-nxdomain", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "network-http-blank-user-agent", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "public-ip-address-identification-attempt", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "registry-autorun-key-modified", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "registry-autorun-suspicious-public-ip", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "modified-file-in-system-dir", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-system-dir", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "process-with-multiple-children", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0005"]}, {"bi": "command-deleted-shadow-copy", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0040", "T1490"]}, {"bi": "malware-generic-ransomware-backup-del", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "feed-domain-ransomware", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": []}, {"bi": "internet-explorer-phishing", "hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "network-fast-flux-domain", "hashes": ["1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621"], "mitre_attack_tags": []}, {"bi": "malware-ransomware-torrentlocker", "hashes": ["1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621"], "mitre_attack_tags": ["TA0040", "T1486"]}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Razy is oftentimes a generic detection name for a Windows trojan. It collects sensitive information from the infected host and encrypt the data, and send it to a command and control (C2) server. Information collected might include screenshots. The samples modify auto-execute functionality by setting and creating a value in the registry for persistence.", "hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "iocs": {"domain": [{"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "ipecho[.]net"}, {"hashes": ["3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20"], "host": "inad[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "fkisew[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "azazyvozo[.]klontrek[.]org"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "host": "anikimogy[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "eqjcyn[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "esergsicuqi[.]klontrek[.]org"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "host": "udyhytu[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "esev[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "icupyno[.]klontrek[.]org"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "host": "gnoqovijds[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "ikig[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "apimumiluwe[.]klontrek[.]org"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "host": "uvenemico[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "jgihasov[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ypyhelynac[.]klontrek[.]org"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "host": "jbyge[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "amsdoryr[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "ypybo[.]klontrek[.]org"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "host": "alihoryty[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "kpicyles[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ofyc[.]klontrek[.]org"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "host": "ybuny[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ulghyji[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "yhytabykoje[.]klontrek[.]org"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "host": "aceripy[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "yhdduborpw[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "uzag[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ofyhu[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "obyqubax[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ygeq[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "ykegpxakoso[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "upyre[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ehegujafog[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "apywohib[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "alucaledof[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "oryba[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ixofacuri[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ekosi[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "atbhudepes[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "opiviknri[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "ytetaq[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "wdure[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "axqkaqaliz[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "lmicycypiwu[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "ebacjloveq[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "yvin[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "upimiqsbut[.]klontrek[.]org"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "host": "axplphako[.]klontrek[.]org"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "host": "ykig[.]klontrek[.]org"}], "file": [{"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "path": "%SystemRoot%\\<random, matching [a-z]{8}>.exe"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "path": "%ProgramData%\\egisasyfituvorem"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "path": "%ProgramData%\\egisasyfituvorem\\ocuwucec"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "path": "%ProgramData%\\egisasyfituvorem\\ymuwimec"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "path": "%ProgramData%\\egisasyfituvorem\\ytuwafec"}, {"hashes": ["454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c"], "path": "%ProgramData%\\yvenijupucykohip"}, {"hashes": ["454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c"], "path": "%ProgramData%\\yvenijupucykohip\\iberuluq"}, {"hashes": ["454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c"], "path": "%ProgramData%\\yvenijupucykohip\\izeroguq"}, {"hashes": ["454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c"], "path": "%ProgramData%\\yvenijupucykohip\\oweryquq"}], "ip": [{"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "ip": "194[.]109[.]206[.]212"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "ip": "154[.]35[.]32[.]5"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "ip": "193[.]23[.]244[.]244"}, {"hashes": ["1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2"], "ip": "208[.]83[.]223[.]34"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "ip": "171[.]25[.]193[.]9"}, {"hashes": ["1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "ip": "86[.]59[.]21[.]38"}, {"hashes": ["1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "ip": "128[.]31[.]0[.]39"}, {"hashes": ["1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "ip": "216[.]239[.]32[.]21"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2"], "ip": "216[.]239[.]34[.]21"}, {"hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c"], "ip": "216[.]239[.]38[.]21"}, {"hashes": ["1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "ip": "216[.]239[.]36[.]21"}], "mutex": [{"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "name": "Global\\amysozyfululyjotezydetovukenana"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "name": "Global\\ecicevywiquryfezucekuqo"}, {"hashes": ["454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c"], "name": "Global\\ikudigulepimokavodituru"}, {"hashes": ["454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c"], "name": "Global\\ulebaxufatypuzikicihamygynosebu"}], "registry": [{"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\PHISHINGFILTER", "value_name": "EnabledV8"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe", "1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c", "1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e", "203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745", "2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4", "34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9", "39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55", "3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc", "3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6", "3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3", "425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d", "454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a", "51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962", "520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f", "6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20", "6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd", "850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8", "8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621", "a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554", "b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f", "bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c", "c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a", "dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105", "e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae", "e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2", "ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed", "efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\PHISHINGFILTER", "value_name": "EnabledV9"}, {"hashes": ["3e0fa04526c74a8a366b686445191f1fc3c4f2dd3e9bd1a92789b5f24331fccc"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "axyrijit"}, {"hashes": ["34610dec061686d906ee7c65071b6b35bdad5a86754a0143b43fdae2167f5be9"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "oqolevod"}, {"hashes": ["1c21f79ef125a536b2a6998cf87cd4c76789643dd1b6124f54ab87ff26647c1e"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "uqyrfzis"}, {"hashes": ["a03e4d2674baa9dd4ead9fbe015337eddf33d5a249113d253f94472e22dd9554"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "umymodar"}, {"hashes": ["dc449d29bfc20641fc5401d6ec7212c9f1603316f5eea98fec67b499d1a93105"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ubenasep"}, {"hashes": ["51064cc7c839640f97c934cbe6362a76fc5ef44a7e32a3d23bbf370944110962"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ukmcucer"}, {"hashes": ["6f53f734058d27f1207bf40cf3e9fc477fd2dd58a34e6f5b48d33ac4569755fd"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ybakfval"}, {"hashes": ["bd7e8821a0cfe4798e392b7aeea836e4470ecb285482eaf7e044fd9ebe41133c"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "oqimyqxs"}, {"hashes": ["3e733a33f1e6e6a0335c7d61bdac30f9b576a80f3efca9275b5e7696937ed0c6"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "usylujht"}, {"hashes": ["454813c1f21ced0e6eba810f0fda82e1b815140196ff4ecdb74882467f7c348a"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ulumzlik"}, {"hashes": ["e09473754d74f9605aa1b0124675cdbcf84bac7f5e97d619f2137eedc4c2beae"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "yjikapix"}, {"hashes": ["8d449a17fe32680bcdfa47464c28fce37a9e973d69a20d7a2dc8a974dd5c6621"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "rlycymaz"}, {"hashes": ["b500b08f9f4e050b1d038a3c0298071895dc0682eadba73852fd07b217c9131f"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "asawotyp"}, {"hashes": ["2d590936b2d32eb31e73abdfd84b69604990910fdecac4aafdf73971361f35c4"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "oludumut"}, {"hashes": ["425ca325a563391ba1c92291b85e25f84472dc674a077b1021ef211d28caca6d"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ubsklzeq"}, {"hashes": ["1b7ab012b669af69da3393a2d6bc757fa704c3cb64a2efda864b7baeeb38904c"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ewewumew"}, {"hashes": ["39f1d72c7eca3e50e270ae2b0571f35db49e71d3f4d8a01f2125012daa578e55"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ewysupic"}, {"hashes": ["520a3c4143c7379f78f7be0e59359938eef07843374ca373fd294ed2e749cb4f"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ujajasop"}, {"hashes": ["6bc3e91663d47faa4f4db1f4560fed4b9c33aa56f07ab5cc9fc74fc8eb933e20"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "irujkjos"}, {"hashes": ["03cd3bbb28b53c4f9b7bed0858cb1457c274634d35159be0ec5818ea9231cfbe"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "dmiroguh"}, {"hashes": ["3e75fed4c92f06024f24be6f972507efc9aa880e5d97f9e616dfc5badb603fe3"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "jrodixyc"}, {"hashes": ["850c0a3e4a5f2a5a20b24934a5e6e948b6e0c38d32ff21fb118349dfb06900c8"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ypeqykax"}, {"hashes": ["c59d2f97da4804a9ce14567dc0dbd87ed5304097bb7b92fc58f669c85c86532a"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "uzisipat"}, {"hashes": ["203de8c40c4108783c566da6afc0c881936c120b4b232fd4ec8e6ba6dfa81745"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "aduheham"}, {"hashes": ["e46d904953edc90dd9c1f7c102bbf9f5ee58b1f87c0edba2e2ff1b6942625ab2"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ecaxyciq"}, {"hashes": ["efc32a0568a87a8e956b4eaa8de95811a6e043cbfd4cd812ab3a5fd92f3a842e"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "umifyjem"}, {"hashes": ["ee532f3e80b907a8c63b42696f457b8f70d6c2449b932c330409bd3645c8efed"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ekvjyreg"}]}, "reports_count": 27}, "Win.Packed.Zbot-9836849-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "pe-certificate-invalid-signing-date", "hashes": ["1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "pe-invalid-certificate-signature", "hashes": ["1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e"], "mitre_attack_tags": ["TA0005", "T1553"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "dns-excessive-domain-queries", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "feed-domain-banking", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "registry-modified-rootcerts", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005", "T1553"]}, {"bi": "malware-known-trojan-av", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "listening-port-opened", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "altered-sample-dns-flagged", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "registry-autorun-key-modified", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "files-deleted-used-batch", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "cmd-exe-file-execution", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "http-response-redirect", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "unsigned-roaming-execution", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005"]}, {"bi": "network-dns-category-cnc", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0011"]}, {"bi": "pe-imports-toolhelp", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "sample-pe-modified-on-disk", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "malware-compound-cta-activity", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "possible-dga-communication", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0011", "T1568"]}, {"bi": "registry-ie-zone-settings-modified", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "malware-zeus-mutex-detected", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "pe-artifact-invalid-certificate-signature", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": ["TA0005", "T1553"]}, {"bi": "html-small-file-redirect", "hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "html-excessive-javascript-function-declaration", "hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "mitre_attack_tags": ["TA0001", "T1566"]}, {"bi": "nginx-webserver-detected", "hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "mitre_attack_tags": []}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Zbot, also known as Zeus, is a trojan that steals information, such as banking credentials, using methods lik key-logging and form-grabbing.", "hashes": ["009fd57e4ea47e8ba12b937dbf2aa0ce08f4dd3806b97635fc511b0287a4867b", "034807933fd7a195665ea15cb961b059d7cd90c6a2d6b058cc96d73f03c51a09", "034ebfa0f6d4521e31ae7c4f964683c0970ec9c4520233996042181995c27206", "045df59442f780557cbf9f2c760cb21f4554869a9b7043bb672a759c1576ddcc", "047770f5a4809e4e1ec8705f40c9be26362de4c54f92edef007df21cc79e1c79", "0506e7881f173cc6b9189028a09e83664601749702ece1fa3ea568df8fa150e4", "06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "082abb125295633f9d09e0adfbc5b945de910102425653317b57afb8c563eae3", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "09b361c4cbeeb1ab064d5bdb00082f1d5fd8c81d0e441a253e5024b94297c7ea", "0dcfaac2a7ed28e01a89dd35349893bede2162e9d93d6b16a8fb0fa476299499", "0e82ee77672c8b916f41d4cd12e9196069bcdba2035b51ccc4242d350745120d", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "127d80807c60681810fa4cccf398180280e2f27adf21730601cf476128041c11", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1610b98b612658ca03ad0ed853d855a0827031d6711dd06f849c04f8d99cd22d", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "171fd684475b3bf173dc5ccb289118eaea3e860ce4b1d88fdcd67d9f6391149f", "17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e", "19d13bd5e5830c85f045b3203ce2f95dceabacf38f4233f90d0a00151ed77038", "1b6d76a375f4bf6c12338354fa30c042fce823a387f0bb4d01a4badc1130c61e", "1b99eae15ddca8ca386d02dbd965f25f720da9fc30361a58fa73ff28033ce8cf", "1ca4c642c33b3299114da34bab3bfe69faa3795a3794d8e20637dd54f7d6c06c", "1cd39f8fe6fd059f8b5a278a55059975505da9a3f9ff3bbf9c7988f4d1eb4c02", "1ce0a055c0e53b31f233f760f9eba8934923d149173a55adcb4766c1bc7c149d", "1d9af1e27b5a0d2576650621bb084f5bc342402e693f817d66e280add30d0f18", "1f0b91636cbef75c11d04c65a9a8a6bb0619288a5b6bff9f57a67daf90acf178", "206c87525c9dcc09786a952be77cfca5601c41f3c34be40c6dd703cd9d9c3979", "215b959bdcdbf705910707b0652557bc533c803705704c688f828a40774dab5e", "24376e9d478a460dbdfcae5e9d16412557ed4d61ff3968da3a6ea48fbdbe9237", "29f707adc1262ce68bcca41cb5e79e2e6229a0b09da9c098f0201091d2829aa3", "2ba34ad995ea8dfacaebb0b57e66126e520ffe9450f62db5dc4e0a0d6afeff5a", "2c46d63f5e085d269955ce71be8c8115bf939f9b8954180f290624f82149869e", "2c607fae8ce08b6a48faa19834868627016f67c02aa10d4c25165db11ca26f62", "2d0b76c25e52ca49913b22c476fc0453e77c1ac668ee5a61a4319c7038da998e", "2dacbf06e794a89194ebe6d13ad5228e1618810a1ac6c686012a7a4d315acfb1", "2e9084b2e0a73f94560ceb8064efb003827a3ec37377a0c28b3b3504a7c27441", "2f684d4d79b032c25dce67bfd8ea385c63c5d6e8b23bf10dbe78512a1a828cb8", "30a5054112bf5bc5c2ad77fdb684ed171fab6cfc280c0fc1608a80e01a3e3564", "31f2a8a64d46b2f438af08dae252e1f2942954c66a6daab6b72a3ae1eafb0d5f", "32c3d8b40f5a70456cca5bbc261ce9938c835f53f21b53b037b2433fb8d20d3d", "32cf7a08ddc6e14e2affefae6c7393470654c8795e63708f6838f4b0845e8ddc", "3354ae95b4baba2c207919cb775b21bec448b93ada471dde2e8e15ec0f6c5c83", "337c4f1f87e7a0cc383c80794cf475eba2e5eb2879930d621291ad6590f91872", "34d53d713ef14b850aa46fce81b26211dacb3604bcfd51dfc5e39282cd89ecf5", "3678cffd2f83ff398c781adc575229158ba1d05ccc162a89f850e7e6d429c7b2", "374ff23965806e743ab29399e2d3358cf29d278bd1e1329ca7a5f198fa13730f", "3751af9a8b06aea2911e3554a1aa42deeec36f750a1e3c1502ac512949b58702", "37b3fa1df5260b7735fcaeafa8336e3bb6a630cd494465070cde6e5012107d43", "37cd51ce240043daae7db7b3bfe6dbcf29004662e6bfbecfc2ee711faf57084c", "380278b4720301e7832327058352cf496cd8df261a6f283f06d7aee558dd5461", "38d80345501664080d8075ffc636359ff128cb917a3ca031f19263d0bc74bc23", "39f6ab62a03c82c01d81c1843a6a4af02b2bd1111cdaa536057f51b64b5ddc8a", "39f9b7dc592e8b49e7ef41e7d460b21a9138250e4d6341a208c395b0fa3683d7", "3b863689b8bb86e6c11c2bd21db05b5d890fe555498d01af73ec618aa34d7731", "3e37f38a22e32767f1dee76ce48a655ba6b7bb0d4dcef637579431213aeed289", "3e8d088cb26708c86c45545179b45cc135d29b94de6719cfe7778381d9fa7927", "3ef0f3b6f47ebca69eaf6e53595b6a02e6a9a5121fae4122facb2c92d1d93caf", "3f8acd2459d0b0d810a0fea2d0027fc356650864ebf20b99518445f66cdc7004", "400b7ad233364fe99d67fe2f1f3e031599579bbbe24ba75a99574589f4849a27", "40c7aa04da8d932a000b78dd252b1b9671374bc4f14169944f3d818e30e3cfbe", "42e45df214aaa9f9b91bf8cf89014f63cf6548572a4aeefd7e992599c7fb60d1", "42f5905f01e33aca54978ce08a4cfda5943316d037c020c8264efbba3930d1be", "44007ec6130c9979642ae581c2502686569e25401907a490afaa5ed7e2f48dd1", "4451185d4bb2ae187f0ee1323a310f6a1b5037a993e201ff2230dbd9d2a0ca6d", "4646a376e12039516759b99a4ba83a21100cee15fb7308166caa7c583cb81e06", "4699adcf8eca56d58e8b35049b468756303e4945fb4ca880901ef373cbc77ce9", "484605471f9fbe1cd47119804a8a66604d807565ac2c5d52f5840c65a0d58f5a", "49e7d11f16f8f3e49c4abf69be875cd54ae321fcf9514c4d2e41935c88da8f4f", "4a1326faed1092b46355a60852df38867981cde6eadaeb73ee800d8fc0f7f8e8", "4a435f0a0e1f08c8e31abd4b14baaf0ca728257979490460fac267b360318a1e", "4a97116b68c9bea1061ee6c824e50c78b69d8c91aed3814a1259e4d2526aee5c", "4ad7f545235ba5c5ba05b5cf339500254730d1bdf0857e6bc95799c5571c4aa3", "4af940521424c5645889b9c7e021f690ca7f5c956d1731df4a897f08bc612aa8", "4b04e059b7e9b4addbb7d8e074f4b5e6758395a24827c9dfd554659a5f69808d", "4b4c451fb9568b22ef7c30e6f596dc99d7a2c8e2260d97e4af2bddd309aa862e", "4c0bfc6870f7f715f3f52cd1d3018466e81b4b725a62162ffc3b2e56f62c9253", "4d71318a46169aabb346c610b14fa20b594f9763e65f407849b939d65191cd63", "4e48fd894ea710eb1eda89554bf9644d1a30eecea4dd05e3234f4507d01bca10", "4f068b5789b0e93a348942246fe81ea4e8b4a539a63f9b27867aeab135216997", "4f270f8b808e4a3a74e03cbdddaa2f91ac5fc90ee63fcb1620c8f305e20a3e9f", "4f38158f240b27ca02ee36585831850cd2826dbf618fe712a7a961131eedbe92", "4f6ed0e2b218ff27f5457fbd5d7a51a3d949bca57284d6a52fe6615f3ceed8a4", "4f705143ee7a8a92cbd01a6e11d1988791a123e365574d616c0715ba644a05d4", "5045499e4e41147019df1181387c75c20355fb57c94bc451b3c2537d08bc916d", "50958cc98b689b742fc990d6dabd96794574477ada2e7e33d327607e5f33279c", "525899fa1cd9f075ec58002c360c6763bb72d573f2371d5a69ff2eb7a16de2dc", "531d553865106a105f01bdb1cd9baa246266c9e4fea54d17a5ef10ba810be2ef", "5467cdef8fc45e5f4cc323f4fb46ecb6fc72f799d5c0ed0cd4aab124a6716946", "5540d8e84f58f27b555b4e524da2a40b883032f997039b3d7e1721a0a75390a5", "57b49b7e5886c1837fa42980995b23a4275efe0a63425e0db998c162a4a30535", "58e6d5e72f8f31b9740736c924a52fb8542846223cd366abb94df7b69cc46d80", "591f7fb72c00ba66bde2834b0798a0294abb3c2b14cbff858df16d8006d99801", "5950e3f9874e3750474bb8dd963c2509c0e046b0910e5de9006f10a872d0f7bb", "59535d482cc5a811a82395f77607d45c42a67c3b56a17e0eb3d9f63114d696e7", "59cef497aca796de76361dcdec42e9bdd0992d600560bfbc250ee87c652171f0", "5a59e7559a396060f872b9f438106b82e943e7bdeb34eac499ea77912b362416", "5a66ce687fd0f85a5d336944757c923867364f70dae8d7317aa14304e6a83ccb", "5c1bff2be90c13cd15c682c8670eeac17f5c97c18128a1b48e439694c0f17c97", "5c691d5f28bc549abe40e0e34ecf2fb220cf914273c692db93d6ed3d3b38a6b1", "5cc11d75ab8e9df95a33fb29c7741cdeeea72de162f7b42219145d49a47b0dac", "5e37fb9443a34385760b4b4f1a498fd2a1789469818fa8c3c347e7a0c898ae4f", "5e5bb8b6f746e6505729697a29469c9dbfe7ccdc755c318a3b7102654ce2e85f", "5f069917516ad77d5983f39995d0d25b268538f996c38e00e1cd3ed255d24e3c", "5f8a3ff74abc3d84c3e1efc04b82a79e9a4267f087129034ee3000302646f8e7", "602bc0d52cc9de1693a9fe82f671f3f8e561c16cedb5d74d4e16630030497dd7", "604802a93c70c6ca123f6ea2affd281c1bcb56ba82b37bda6b6c28a5d3f41255", "60d811598966dc1b1024e9fdd271f8db57113b79ae4d7decc5f92e03e3b087a3", "614d8e5797c60c694042105a9b38290b75c71440ab4e9233e00f4d0dd89c17ce", "6176e623fb83f0c4f37131f8ee9fdc9bda8a34e05cc2f6109bd56149f4f610db", "617b7dfd1088993196dad78cc05cb285fa4d7af1c362c9b5302c08098613f04b", "61c71c2f1b7f4f5ff14b12c5f589de4d4289df6d6aea6f962ca8dc86db8deb34", "626163592da5059af6884345656148c0e116537496a5eaebd228932a866fcc2a", "639a3f5d91e3f7bcabdd06233e395db2387563a4d9a41edc8c80f7def4599be6", "63f6ad6b7fb9e0cbcf9976de5167ae3e7f67b018e03a0d84da10d493dc767567", "648c12923e573749a35caee14b22648aca7af45c51f8cdf40627cc5a315b3e23", "6659e284363c544e3380f9e1cf14e33c373647ef933d1139a0bca391161c6ada", "66e38c706311e30776971a16cb858b98e0e4287c128c44ac3afd51d1196f94fe", "6729742a05005a7a74303167b57e058d4d2c866ea79e306a6b806e4a43b5ad82", "67d43403226fe8f24f77ce6319343aec4a421f26718302532069319576c8d704", "68337d39d14daeee57a6459747908ab3927d38a49533680f546fe9490349d40d", "68c839a712d46c9e79ad21265662c3e079fa96810ee3e8b951b993576ebe6986", "68f39bc2c776e5747e84d50fad4b772c12bf3f38da16ce8c840ceccab04fbaac", "69b94e9114b564ef8503d82d2694a9af5bdef2ef456fb76f19cb6a307119c812", "6a2819658f5914e4e654339dce9fa2fd01b432405dc864b76f53d20b3c196c62", "6a5a8b2c55b2b63ec10ac5aa341eb844bb33a3b684545ee7df888061060ed527", "6ae7e23c2727096d30c6745d2d4b1f99849c0079ba40fcd11278ceb84c50611e", "6ca3f40e6defe2e28b8b140924c919e2de14c6f9c33eaf21451383818be1ebc4", "741e13d7871720459b37799286532dfb280520436573cf6aa43c72519c5c03a3", "7578a1e74ab3e72f940f4ff1dcd9ba28f98cf89f299945c3ddca7c3975ed281b", "77566ab810affc9444d5d80a22de36214cff3b69884b14aaee92ec672dfb87a0", "77b6d11e3df93a230801188026d6684c315fea760959156af756fbfe14ee6936", "7882862e3a4e4e0b5f5d385aca03c0837576160a676d195620dfab400719418f", "79673588a1b72bc84911d04300b39a151fc155e9a4d1de2c5e460d9a0c934f49", "7adb5a14f9dc24286f8716535b27bc7333693ffe18609f095fe40be7c4f545c6", "7ba4b2f0242deeb151d77c0e6715bc588577cc0513a0a58ffe7bb9f59292cb92", "7bb8fc8fe92f1354b943a050395054abc019e87adb846b49e4ecc69841da5d29", "7dbf2813dbd2f317e3db67463879b7b2358180475ae9ef367f4ea91ea3e38d6e", "7e2e5b1f2f543fb8683418dad36c2f76d7dc2aa766a0d3d5f0714795824570e0", "8063173ff36a8987ee7d68ea8c2afcef03472ca3b1fac46473e303935e1edfc2", "80692048cf6a6ba8e3489eb2d64ed09b46d048b627774cc3f8b3a752a05468c5", "80e4a053f75429441d6aa81252516da8d7546acc0c3abf67aaa349a0fe720577", "8114e1b37329e466e0b075ee869c58273e7e22b1bfe413c66fceaa6a6481ea5f", "8297082d35a1dab2c29373b5b0d9d829bd3e145976b95c364c6aecfee5c66075", "82d7473db8a69c75970198aa87ad4310c79a5b612215899186ec9d5d67df29ac", "85416116af87254caecf5a30bdbb5dae0ae14f969719260dbb56d36452a4ce8f", "856c1a0b6bf418ad1692449083a99d2bb84f63e835443848891301b949fefd55", "85dca1c01efab68ab99cc5a4635cb847248a5fcbfd92e3689434d0ab7f4badac", "869fcaa7982867df4e27540e6d112c501638b4007daa6beb861cb0cb0df4384b", "88be6abed88b56d6742dde15531456a4e6025336432cfe9e95a69ebd501980e7", "89b31a0e0afd35d6ad03e2a66fa79280ba6528a0b00e88fed9e07d189612d63b", "89d3af55af5675995a00fda8db3b46d77d1831c669f7cc39cdc59705f43acb9e", "89d6efff9cfba9ec7efc6d6f3a8e85be954ddb5fc7f92db8235c97dee49ec026", "8bb09624dad207a12e29422dee95a6cb5a02fa65de5995a13afd069b033aa6df", "8cd8a6b1ea97fe0d9c11956bd856a2ae3ea097fa7e447ca50a020c0bbf8588bb", "8f2f3c489e75d0c546280ed6d835d046fc68b668b3c63619275a3c23f011dd60", "909f841da1da9526684597bbba9b3ca0c93a6743cb8e2dc56a71d8452e84c770", "90adf7ddde0400b5e2ee28efe54f0ec86e206938b361a0e056302d64583e9435", "91129d38e01fecc1c10be72d03c8c1dc110549b8edc3b0f7cef55304a1234aaa", "92a31b200855af6ca3daf822526bade58275cd53d128f1b89192d2adec5d774b", "93aabc661d3457405e8c7174bbac34ee46b3f0089eb5eb7c25fc485f4ef7b158", "941b81aeda69c2e93b59083768d5e711a5eb6f3c21197806b31bf258afe1f3e8", "95f46b4a322fe61076c41992b9ba7d22132228724aa20f0e92d976e6cf2132f1", "974351952a4cf17b482b7e5f68efc172fe69ecd14bb7e651c7804b9d0e016620", "97d50eba213e3973e5183bb43e9ce72ed72e132f16383dbe78d7ff1ef54a723d", "980a7dea828d2fec8cbd4e14d49836f59ae2a423826a638655b3f5114ac552d7", "9911b8cf1fea938d5ff278ad40cda99ec415ae8cc4d7411fd444bd27e883c3f4", "993224d390e1be8c86d2e6427a5a97d6d27a34d39d0081f0e158fedbcdb9a6b3", "9a34a55e705ac3faba0435ab4fa189c3efeff7c6bed6b32f7adf4a9b10469844", "9acd32a4e236c94765e837550efddc359eddbb262f1f5e7b7cd2a2cacab34688", "9b0e653f13318a4ebd5b1a3b27881d9f15f95510de1fe572c284be976c20ee0e", "9b760f1393806b1920e786cb7d807e6af7aea26b488bf189c7d1c2e79eb26611", "9bbdedd56b2ee30d7eda684382427953df662a0be9a04a9d28ceaf32efe4a29c", "9c5342f900ed90d19ff9bc8e66c2e517a5ce039b14ddef404967489f12bd8329", "9d6dd8a29f68f4cd124f089ec7a3bf5d2f55e3b5ec4b0cafa6a09a7e4c34b88a", "9ecd2bf31243c5cdd3a3784b422305dee192b04826a1b72453c5dd73f7e14a3b", "9f18f84975829414299905915e429ccf08ccf08923c29c3ce8c80e14c1a59ad2", "9f25bb822c731d0197ff40b9637978b635b06d460b6ed561a3fa37f4195cbb72", "a05913f822859af9bf0518cd9fd8a423da49d49ee8efb076ad247af468af681d", "a06c8b2d8fd8e1ad48c53bd1d20b53b84303b7fce0d1031ee56a359a8877bff4", "a0ad7a8d11627d6a1ab2d4aaccbbcc3b2ac0c3f9b2ae256e17460627acea21d0", "a0b69e38a5b6f110855577d8a30cf771f193abe46b3284957fd98054919711b8", "a1629eec805fb5fde873c80dfa45b3f8481780df4c56a1873e28f25537446755", "a1916b9c5f594af0131d952452b48f51c738e340dd2fe929c77a451bbd2cac45", "a19973ed14450fb0b2f7fcf49d1d2d1d198a563c0197cd0e3cf80f1eeba52ac8", "a37cd1a7344641ecb3710dc6a2a43d1a11155502d739947cb8ca9601984186cb", "a44d989caed900bf2710a3c95a75d223a08e783a103e70284e517f9e8fb642c3", "a4a4c014cd3125904c3057d5f4bbc11fed146c0cf5196d0c7d7f86cae6feeb8c", "a533c8c25cf53b952d6db287c3333a65c9ae89506587d1ac07d93156a74b5aac", "a6268900a1ec4f069b1dd72c194abd3f2c8db2c90544032fd6f36b72f11c31b7", "a713563a900325c77457f9f677a69373175c68346fe94de4e759fbb7d143b73f", "a73a72048e63d09027747f34dfe040767a23f495be95b438cabbd9e7ce78b7a7", "a84a4211ad30566291a380762396c2aa7e49993f6b56050de4f68e681f6cd217", "a88e37425b91bded290603ae40be79680ddb4176494c38a7e92cfd56ab275c1d", "a8e9509efd179f857efd7fdf1b865890781de273c30c12e8904b6025f3ac23d6", "a9bf3687ad2b322ebe61d01115641ef8bd7708957b5eb33e2538a8d9fd0bba0c", "ac270acdb55b3c682f8c8e9fe3b66d080b142cf6bec2d78666f2b2fee5b567e8", "ade9f7655cb0c0f16ae9e73027d429b0a37aa5d84f34d917322c8d0ca630404c", "ae1d78be5545506aee748043bc4f210f3cca4c2f69aec075495697a19de7cd21", "b0116870795f2de295659f5bdb954b000a0045ff1f810ff2f0ffe7f1a96acdae", "b03430208093012307e5b71de25329fd0eee9f612832aac5518f4fb19646f634", "b05f4bcdbcd7ce900764c5cfe146e8919e3011ab40ab90c638ea99a90781b9bf", "b0afe1e262f64c992ab0b5f7f1414742f109e113d7fafbcd1c2e557e365490bd", "b115c935fe521ca78f24a35202f3a8b1d13df39b143d1e5b0bd453e666baa0d2", "b48a81aa311be99fbd3cf8c0e0c3ddd7324ef665a4cb90739fae229d52d21068", "b5476df5e9959ba46d9b2573edf3acad64d5d7f2ec59bd34b95119f1c81cf64b", "b69989fe4b0945097d7494668f9c47ba44137ad4a0602710965a5b16dcd19cfe", "b75b262d3031e451ecb1f0bc997482c15dd106394db71861adf0298bade3e7da", "b79a7d35942cafa5882ca7e1fe47455dba680463d5a31fc0f11471bd9e933009", "b85401d91b6ca243801a6851cfdfd36a34652d5765e6f51edb95d662f24fdbc3", "b9a05c89242027792ba0d3692d0e5d66bd5ca4eca3b681d9b01c6f71f5e470aa", "ba212f0005d29c6f65f0d8172c9fb492917fbc4fe2cbda02c0b60117bacb9a46", "bb11016976d3bee86cf40e1042d90e6fe2ffce67d809f48491123e9e656b3c34", "bb52f487e863959ffb964f083052871c134dbbcb2f93b88f1d3d40d63d2c8e66", "bc99f16bc9f75f0420d382c808fc7df36f67175ac5ab879cba54c31bed87125c", "bd74992c584f254eb2681fc38d6bfc854cddf7363383ef43b200b3437b675527", "bd990de9c42bc7d531d78508376ee2bb0ea9cefbfbc611cc365e351e0e029155", "be523236f72220fd7829aee09b176fe0bfeb4da7b682d088e613a87991a4a156", "bee19000e7d85e3e6350bc8d707d8deda67f8cade97bee44eb0d24b8743f1087", "bff748ad18b1be10e1900d4194559fc097b7b3a5257ae6c713ce8c39486e9858", "c21e639a1a66c4117fc3a2cfb56a53b8a71c54a8d217d70a9603ba523da57d91", "c230d06207998f0130981eac4fe78f2416e6e33a6c03a021db386e54fe99a6a4", "c2825227ad839c4b4a5b881cb27c9fcae1cd321d07401b4bd067fe8e3d84b6da", "c4eef122e184c014563ddb5f1fd5d2ed7295c37d66cb28ca7ef6b3917cdced78", "c6d603d261cd1cae54f8a7175c3f4c84b994846893d15f2713203b1724d0d841", "c8078c102ee9a9426ef28dd600ff3eabf96d92fda757d47272b59db74203e47e", "c83cb475522459aedf8fcf3b62cdedc5fc54110bab389b510ae6897d5b6c529a", "cabf0fe204868ee7a9336ec6f98c092f1d3b87b8f621d99ddd2df05604135217", "cac6e25083b7d6f1620579e49b99dbdedee5bce651315419f74fa4ece10e1b24", "cce4f47d7ebb97463e350645eae9a48142d9a1c7ea1cb9b5dcb50ba9dce2109a", "cd46221f285596550ff5fe1b0b5b0bb3935a884bdf63c61cf842e2a0b26d738b", "cf2b1edc57cc2a89eea008785ca99b4821dd86ad63d5c89b76d14058ef2dea38", "cf434a60d956aa508995220d3ef53ede3acc4787c873cac1f7da37239540ea58", "d08f813677fd625676511989b9858cc7693952f23d321fefe18e2c3e41fc625f", "d135f9a5585aee6a3d0bb27cf035de43bbe63e035011b2c868c771df47038eba", "d179911f33c52a66d649e11ae66e3ad0b9c58b68da0524eaa82e41ec7b0d9f38", "d1ca49df157700824cc6f1d707bd5d67274bb144f259f749e3c3d89729577811", "d2e0bb8c0b0b19f51b0335ee630080987a1cd587cd73d505c1093f2e00942873", "d3200a24ba3bf2b2243e6def282dd938a7bc0e171fa3d81011556b8a1aa069c8", "d416910947fb4f2efc061997767896a22b8441a9e2b38c6634c40bc98e0f81ef", "d53aabf69b355c42151183926c890dcf4a90348c7dafadb56aca66d73dba39e6", "d5898cb2c784b8ba03370f33da473f148c62aafe2b6e5f2f4f6e1140a861a7fd", "d6702447659d051b89a0d44e069eb1324744380deab2f9a36791789211499a65", "d8e65e9a325a84559ee89bbe4e71597fd08173fc8cdfffbdd5a2c74395fa3b6b", "d9a482104773a0c7a832e7def7366913c59bd8eb3c96301234dac7d08821ee9d", "da14b537db5deb359f6e192adb043881770c2f147dc7867b8c305de2f6e1319a", "da990478d304100ff5d287dc0c10e8b51eadf195ab6d92addbb75a79c46ef5a1", "daed46a2fe407f2018d980167cd18e64d21b9ea9db11f8c6f68bcc75b4936e12", "db8b6d7243633614ac0796b82108bba3ec6e4d63ddc68ee4fbe0074e71ebce00", "dc6c5e5979654b14527cea0ef3caa0cad3298d2548c33c61e268c4dace1096ec", "dc828378898b0afaf287150c4876b231338eba4f82496f4e19e55d1e038e4941", "dd16fdfde1e479f438549395a72a996ef2b862ea909d156a40a3351c0ee5c89f", "dd328f0e6d0cbfaba1e8a8eb69c20d07d1d18268959a6a6b67551ec2d0efa062", "ddc4f6db0c36f625aa662ada1b45b5c3d595d87e18ca67f292d0b7fce2cb071f", "e190d4860bd286eea51671f8fdd6592e2c6d150a82c9d953c567d831ff5ef2ef", "e3ef306bdaed05fcc309d36dd2321afc8e53abf312379eb5a4f375718a4ed972", "e47af6f2eba3f4975e8077543972fac8614fac3fa5567bf49507b2ff0fe16efe", "e4868662e3106202130188ad66f5f5b6f287b8c98a021c11d22956a4a3cb066d", "e50fe0531cb93e375896bc460df486ef29672206bba876be675184d2c22f8454", "e56281f033cca52f995d049bc6ec1e8c0dfef286306e0b535b050dc33a928877", "e56b92677259f67f88c4614c8c4d06b1c71c7e2bf4466a7bcd50aa4521706278", "e7130e70167e754312f203e6e310ae5d40404f342336506befa0e49f02d5a7cb", "e792cd5df9ea779d294579735f6b15f1ee888bc0af6ffff6a98a859f5ccf54cf", "ea4ac38db90b26e3bf8f1bd49e733a523a821ea0a15d8506adc0a4e11c5e7302", "eacea9db58d257dc18a571086cf2b4e84b9930ef8e904d14b1e9198e49ef943c", "ec19daecc11083ca2697bb07983c95601958c331bc809f856e46869aa615b01a", "ec92644970bc7b008689adfc3b71c71ec5464354473476a760260bc39c794015", "ed17597b9f7a686db80cea3ec00f169192872d57fe4bfafd3798f2d7af38d2ac", "ed4e91853e8ec918d883130c5759cd6760760802398f70525d5517f5bc3d8236", "edc300b8825fd65df02358c11455fac319d325691b646e6c115de094ff73a9ff", "ee7419d04aea6753659d59922dc62942df5b5177e1fb5fb8410f96f83e249d8b", "effd32ade6321d553775831f8313479721be4a770d8072b12917bb6eb30edd50", "f084878f9cf212614682c4051583f89ad5461e44108682b61134ecc925ab8e66", "f39ae69968e9c2e5c8d1d19ee8c4cf8f5adb72e14663f21eb1e2092ab7035bf6", "f43327933e85e3c69ffaad155d9ee3c8ab2ba7a87143d406d295954f85270320", "f4c7a98d7e33f86c1902e09beaf33c674ccd49a489a414537e69b1069ed537e4", "f794b482a501bc8a089f506e1f2e12074264bd81ad8140448b61f0817d28f328", "f7a8ee089ee74b47f2151173b900cdea5050afd6501d57ba8bcfcbe545196765", "f7f922e2bae1cf9a4a4f7c8d36e74d2587dd5c36d4fadf2ec28c848e22bc875d", "fb60ab757c69bb2029f18557b449fe04da263a53f4d5e85589115ab8b767fa17", "fc3f027f8efe9109b7954fd97c79de0e33a102b0d7085ac4e936031d076c5a39", "fcb903f5ae236b3fb797202d6a15109c0eba33b688b05df70cf806aea475d1d1", "fe1a4c7d0e9903efc6d8859e290621d45afa14bd2a4357d4f305004dc94bdeba", "fe6dc1c65f8b0555f3f7277d24898c94cf928713570a855ae9c3b9ddcc478ceb", "fe87d569c51db4bc0d9bf266628ee29a0d0edd49f4d18311cfb2ef133aad4c6b", "fed3cb7e3991110ff82b5e356a561b6e2f4a643bdcadda6265dc48e71ee4aa03", "ff5cb70bfe59e83952757e32dc69cb9f5ad0e931a519054e7d3118652117febf", "ffa6204fec624dc0fc73f4bff05d304841afa94b1a51f74edd89745009120e10"], "iocs": {"domain": [{"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "host": "www[.]google[.]com"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "ozguhiqzxvortkuwpvnfduwxpz[.]biz"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "ozvwgmjbojmnxdwolrkcu[.]biz"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "host": "pltoeyvdxydtjbmia[.]biz"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "rkxmitgcymqsxijmjfyotsfa[.]info"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "swcepbtokjovjfuoljcqydxiv[.]com"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "swusxjddvovcjbeaucfuhixkt[.]org"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "tcyhznjsowdcyzirnrtreu[.]com"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "tswfgqaybeslzgqampfemnuwhfy[.]net"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "uszdrwmvofibnammrhmfmrwsmvifij[.]com"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "host": "uwlljzswedzhcebuyprwlrvc[.]net"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "host": "woaetjnxwzlwmjqkhukrthxg[.]com"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "xqoltscyroxdunzkvtovleajr[.]org"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "host": "zlkzxbidydpxyxhlnamlvsd[.]biz"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "host": "zppjrbqhbainsgjnhuwxsbyvgt[.]org"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "eadergdmezhmllycukzwxfy[.]info"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "fmhxukscmzbupemqgytfmxpln[.]com"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "fqizmzpdpnoreznzzibpztizl[.]biz"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "gqdqordebeuxtcfuzllnozlojl[.]org"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "gqldsoztpzlzzfavsbakn[.]com"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "gyldeijvmztgylvyttugwk[.]biz"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "htgqcyfiyltkbdigqptohwt[.]net"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "jbbqhpgqxpojmnuozhrozpd[.]com"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "jnkfpdbydhytwpfyvodyugsoq[.]net"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "lrhyhapnlcypebafmdyxrskh[.]info"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "mrlkfvkgaljxmvhfatkkvxau[.]ru"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "mrlvgujryhtcmfgqhqobmljffagm[.]biz"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "orvpnvhqsqgkhyjflbersucrw[.]ru"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "phmciufybmwoxgnfqwdtykzon[.]com"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "pizdgyaesctsmnvkpxlbm[.]com"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "pnkbcilkzjfscvorduukylhdif[.]info"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "pvtcldmxgvouwxdqivpzorayqs[.]net"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "qijmbvojbqcbucqtobifgmnvo[.]info"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "qscmxfmukwshptlskxwxpb[.]biz"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "rcjnbaaiqkqgjneadaxdytoxqovw[.]com"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "rcmovzhgmwttvwknbsorovwwohy[.]org"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "rguozhifthyojobtmzontdxsyci[.]org"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "rwddnbcqeirealzxojfpxpuk[.]ru"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "sgjzdqautrcfuovlytwoinrwvh[.]ru"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "tcwkkbxtuklucaewhqinlmvgp[.]org"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "tonfihhqfelgediivifzlbihmz[.]net"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "ujnscaqinrzbeworxcgixgiwouo[.]biz"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "ukgqnjfaozfuxwkwsjrfutsbl[.]ru"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "vwbuusfilheeurgvsdqjvqgzxaqvo[.]net"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "xchydyeqfmrpbypvwhjzhw[.]com"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "xemhizvwcyhqoylbmtsjbceqcd[.]com"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "xguwibqgkjlwgdehuchkvhyiznb[.]biz"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "xohkzxpvfixkxolpxsckbdevto[.]ru"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "zdmzfejztgwoealtzhlbxlqde[.]info"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "host": "zxguvogevginenjqchupnivhqbe[.]org"}], "file": [{"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "50958cc98b689b742fc990d6dabd96794574477ada2e7e33d327607e5f33279c", "f4c7a98d7e33f86c1902e09beaf33c674ccd49a489a414537e69b1069ed537e4"], "path": "%APPDATA%\\<random, matching '[A-Z][a-z]{3,5}\\[a-z]{4,6}'>.exe"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "path": "%APPDATA%\\<random, matching '[a-z0-9]{3,7}'>"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "path": "%HOMEPATH%\\AppData\\LocalLow\\<random, matching '[a-z]{4,6}.[a-z]{3}'>"}, {"hashes": ["50958cc98b689b742fc990d6dabd96794574477ada2e7e33d327607e5f33279c"], "path": "%TEMP%\\tmp3b8d7d11.bat"}, {"hashes": ["50958cc98b689b742fc990d6dabd96794574477ada2e7e33d327607e5f33279c"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\xyuwv.pok"}, {"hashes": ["f4c7a98d7e33f86c1902e09beaf33c674ccd49a489a414537e69b1069ed537e4"], "path": "%TEMP%\\tmp57daa82b.bat"}, {"hashes": ["f4c7a98d7e33f86c1902e09beaf33c674ccd49a489a414537e69b1069ed537e4"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\zoorek.icu"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "path": "%TEMP%\\tmpf13262df.bat"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc"], "path": "%TEMP%\\tmpa9471752.bat"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff"], "path": "%TEMP%\\tmp02385a5c.bat"}, {"hashes": ["0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "path": "%TEMP%\\tmpe360a29a.bat"}, {"hashes": ["10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125"], "path": "%TEMP%\\tmp1e5f6636.bat"}, {"hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "path": "%TEMP%\\tmpa316c162.bat"}, {"hashes": ["1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "path": "%TEMP%\\tmpa1579e25.bat"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "path": "%TEMP%\\tmp47cc21ce.bat"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "path": "%TEMP%\\tmpbe6ca51d.bat"}], "ip": [{"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "172[.]217[.]9[.]228"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "94[.]81[.]137[.]162"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "ip": "71[.]93[.]85[.]158"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "82[.]211[.]170[.]56"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "ip": "76[.]170[.]7[.]79"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "ip": "217[.]68[.]166[.]99"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "ip": "190[.]141[.]16[.]49"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "ip": "99[.]14[.]215[.]50"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "108[.]213[.]145[.]21"}, {"hashes": ["10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "208[.]103[.]40[.]76"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff"], "ip": "32[.]178[.]143[.]61"}, {"hashes": ["10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "208[.]65[.]216[.]99"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125"], "ip": "85[.]72[.]47[.]38"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "87[.]9[.]198[.]62"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "79[.]114[.]113[.]9"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "ip": "88[.]220[.]101[.]215"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125"], "ip": "108[.]91[.]25[.]66"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "209[.]142[.]149[.]205"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "ip": "208[.]100[.]26[.]245"}, {"hashes": ["10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "66[.]214[.]95[.]108"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "216[.]214[.]135[.]251"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "ip": "96[.]8[.]207[.]254"}, {"hashes": ["10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "78[.]12[.]67[.]128"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff"], "ip": "207[.]204[.]86[.]98"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "89[.]186[.]64[.]126"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "66[.]109[.]221[.]194"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "24[.]108[.]86[.]75"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "195[.]166[.]222[.]52"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "95[.]57[.]102[.]243"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "ip": "69[.]205[.]40[.]137"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "184[.]155[.]242[.]141"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "ip": "197[.]207[.]206[.]12"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "24[.]58[.]62[.]239"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "ip": "200[.]121[.]183[.]85"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "ip": "128[.]48[.]5[.]131"}, {"hashes": ["0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "180[.]74[.]180[.]183"}, {"hashes": ["0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "ip": "178[.]88[.]248[.]151"}, {"hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "197[.]225[.]255[.]180"}, {"hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "184[.]74[.]127[.]20"}, {"hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "173[.]241[.]116[.]248"}, {"hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "ip": "139[.]194[.]166[.]30"}, {"hashes": ["1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "ip": "14[.]98[.]142[.]212"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "ip": "144[.]81[.]192[.]10"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "ip": "190[.]39[.]129[.]49"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "79[.]114[.]52[.]188"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "67[.]88[.]194[.]74"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "78[.]38[.]132[.]98"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "2[.]187[.]59[.]149"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "194[.]122[.]144[.]202"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "ip": "118[.]161[.]82[.]16"}], "mutex": [{"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "50958cc98b689b742fc990d6dabd96794574477ada2e7e33d327607e5f33279c", "f4c7a98d7e33f86c1902e09beaf33c674ccd49a489a414537e69b1069ed537e4"], "name": "GLOBAL\\{<random GUID>}"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1", "50958cc98b689b742fc990d6dabd96794574477ada2e7e33d327607e5f33279c", "f4c7a98d7e33f86c1902e09beaf33c674ccd49a489a414537e69b1069ed537e4"], "name": "Local\\{<random GUID>}"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "name": "Global\\{C30C6CF2-932B-408E-55BA-04D54CAC27C8}"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "name": "Global\\{73DE6ED9-9100-F05C-55BA-04D54CAC27C8}"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "name": "Global\\{A9348FD8-7001-2AB6-55BA-04D54CAC27C8}"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "name": "Global\\{A9348FDF-7006-2AB6-55BA-04D54CAC27C8}"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "name": "Local\\{C8D239CA-C613-4B50-55BA-04D54CAC27C8}"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "name": "Local\\{C8D239CB-C612-4B50-55BA-04D54CAC27C8}"}], "registry": [{"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\PRIVACY", "value_name": "CleanCookies"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.101", "value_name": "CheckSetting"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.103", "value_name": "CheckSetting"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.100", "value_name": "CheckSetting"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.102", "value_name": "CheckSetting"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.104", "value_name": "CheckSetting"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "{2EC645E8-BA31-AD44-55BA-04D54CAC27C8}"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac", "074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc", "08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff", "0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc", "10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125", "1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9", "1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c", "1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867", "1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\Software\\Microsoft\\<random, matching '[A-Z][a-z]{3,11}'>", "value_name": null}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "key": "\\RUN", "value_name": ""}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\NEHATI", "value_name": "2i0hc004"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\NEHATI", "value_name": "1c80e18e"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\RIWUO", "value_name": "1cde5498"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\RIWUO", "value_name": "2h4hc1c6"}, {"hashes": ["06815ef23a7be4f4488bf3d3b60468cde1f550b5823e5f2eafc1f6e5131d69ac"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\RIWUO", "value_name": "18h51bhe"}, {"hashes": ["074dab86d9ad05991f8f6949300cad30c76ec9022f008e2562fae7fb25b83abc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\NEHATI", "value_name": "2e9gahai"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ZABI", "value_name": "21fjia7c"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ZABI", "value_name": "f1beg6a"}, {"hashes": ["08eb68112e74fab66c5e8e40aa3b67455f80b6e329884b955a4ca572df8aafff"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ZABI", "value_name": "1h3440h2"}, {"hashes": ["0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\BOUJA", "value_name": "19438f7e"}, {"hashes": ["0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\BOUJA", "value_name": "2ch103cg"}, {"hashes": ["10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ECGI", "value_name": "266694jc"}, {"hashes": ["10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ECGI", "value_name": "5h5i36a"}, {"hashes": ["0f06690f2a3c5c254608dae656094ff6ff9874b64951db331e6f32a7f88fd0cc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\BOUJA", "value_name": "1cjg72d0"}, {"hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\TIUVUN", "value_name": "1902b4fa"}, {"hashes": ["10c91b6a54a773412400b15b1e3e83907694b0a7a3748be6aade3faa22e9d125"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ECGI", "value_name": "229i1792"}, {"hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\TIUVUN", "value_name": "2ca762bg"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\IGVA", "value_name": "140h6613"}, {"hashes": ["1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\EVIVXI", "value_name": "2a9ddj92"}, {"hashes": ["1226d3bbeebb00991a2da114e8ea7a47e118592b6eb5bd2f282679fdb4d72a3c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\TIUVUN", "value_name": "1caa4a2g"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\IGVA", "value_name": "367hd4a5"}, {"hashes": ["1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\EVIVXI", "value_name": "16ggf38c"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\KIAP", "value_name": "1bha92a7"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\KIAP", "value_name": "2ib6331h"}, {"hashes": ["1117508cdce58148cdbaeecb39ab0cd8f2060f603f479892d2f6a610b033b0c9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\IGVA", "value_name": "j2fbha1"}, {"hashes": ["1371ef3dffcb7e01a355fc5fd00c2a5f170e84ecba04f7e108fda662f7b95867"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\EVIVXI", "value_name": "2f1d9a54"}, {"hashes": ["1625060923508d9b21ae877e5a279b538cbded7eef94deeb11f740cf148bb6b1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\KIAP", "value_name": "181i0jdd"}]}, "reports_count": 27}, "Win.Ransomware.TeslaCrypt-9835471-1": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "memory-execute-readwrite", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "nginx-webserver-detected", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-communications-http-get", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "pe-uses-armadillo", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-snort-protocol", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "network-dns-category-parked-domain", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "deleted-submitted-file", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "enumeration-browser-information", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119", "T1552"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "network-dns-category-proxy", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "altered-sample-dns-flagged", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "registry-autorun-key-modified", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "modified-file-in-program-dir", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "network-dns-upload-file", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "modified-file-in-system-dir", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "url-not-found", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "pe-imports-psapi-dll", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "startup-folder-modification", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "excessive-file-modifications", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "process-check-browser-mail-client-files", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0007", "T1518"]}, {"bi": "malware-generic-ransomware-entropy", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "malware-generic-ransomware-backup-del", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "feed-domain-ransomware", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-deletion", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "wmic-shadowcopy-delete", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0002", "TA0040", "T1047", "T1490"]}, {"bi": "microsoft-block-rule-list-app-executed", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "malware-generic-ransomware-notes", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "firefox-prefs-modified", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0009", "T1185"]}, {"bi": "recycler-file-creation", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-generic-ransomware", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "possible-privilege-escalation-detected", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0004", "T1068"]}, {"bi": "process-read-ie-cookies", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0009", "T1005", "T1119"]}, {"bi": "pe-resource-lang-chinese", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "process-deletes-many-files", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "malware-ransomware-teslacrypt-31", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0040", "T1486"]}, {"bi": "artifact-multiple-extensions", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-generic-infostealer", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119", "T1552"]}, {"bi": "enumeration-email-program-information", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119", "T1114", "T1552"]}, {"bi": "pe-invalid-checksum", "hashes": ["728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "html-js-uses-location-replace", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0001", "T1189"]}, {"bi": "process-hollowing-detected", "hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "artifact-flagged-obfuscation", "hashes": ["050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-file-downloaded-to-disk", "hashes": ["050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf"], "mitre_attack_tags": []}, {"bi": "modified-file-on-usb", "hashes": ["592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0011", "T1092"]}, {"bi": "process-requested-named-pipe", "hashes": ["f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "TeslaCrypt is a well-known ransomware family that encrypts a user's files with strong encryption and demands Bitcoin in exchange for a file decryption service. A flaw in the encryption algorithm was discovered that allowed files to be decrypted without paying the ransomware, and eventually, the malware developers released the master key, allowing all encrypted files to be recovered easily.", "hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "iocs": {"domain": [{"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "www[.]torproject[.]org"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "translate[.]google[.]com"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "en[.]wikipedia[.]org"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "dustywinslow[.]com"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "hongsi[.]com"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "ikstrade[.]co[.]kr"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "kkd47eh4hdjshb5t[.]angortra[.]at"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "lovemydress[.]pl"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "lutheranph[.]com"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "survey-smiles[.]com"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "tt54rfdjhb34rfbnknaerg[.]milerteddy[.]com"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "www[.]big-cola[.]com"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "host": "ytrest84y5i456hghadefdsd[.]pontogrot[.]com"}, {"hashes": ["050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf"], "host": "ww1[.]survey-smiles[.]com"}], "file": [{"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ka.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\kaa.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\kab.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\kk.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ko.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ku-ckb.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ku.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ky.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\lij.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\lt.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\lv.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mk.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mn.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mng.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mng2.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mr.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ms.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nb.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ne.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nl.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nn.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pa-in.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pl.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ps.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pt-br.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pt.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ro.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ru.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sa.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\si.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sk.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sl.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sq.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sr-spc.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sr-spl.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sv.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ta.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\th.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\tr.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\tt.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ug.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\uk.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\uz.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\va.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\vi.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\yo.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\zh-cn.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\Lang\\zh-tw.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\License.txt"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "path": "%ProgramFiles%\\7-Zip\\readme.txt"}], "ip": [{"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "ip": "110[.]45[.]144[.]173"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "ip": "2[.]57[.]138[.]47"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "ip": "35[.]205[.]61[.]67"}, {"hashes": ["1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "ip": "162[.]210[.]196[.]172"}, {"hashes": ["08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "ip": "207[.]244[.]67[.]138"}, {"hashes": ["050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3"], "ip": "94[.]229[.]72[.]120"}, {"hashes": ["234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "ip": "5[.]79[.]68[.]110"}, {"hashes": ["050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf"], "ip": "5[.]79[.]68[.]109"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876"], "ip": "204[.]11[.]56[.]48"}, {"hashes": ["050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf"], "ip": "199[.]59[.]242[.]153"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875"], "ip": "162[.]210[.]195[.]123"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875"], "ip": "94[.]229[.]72[.]117"}], "mutex": [{"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "name": "ityeofm9234-23423"}], "registry": [{"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLinkedConnections"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "key": "<HKCU>\\SOFTWARE\\XXXSYS", "value_name": null}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.CHECK.0", "value_name": "CheckSetting"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "key": "<HKCU>\\SOFTWARE\\XXXSYS", "value_name": "ID"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "key": "<HKCU>\\Software\\<random, matching '[A-Z0-9]{14,16}'>", "value_name": null}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875", "050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167", "08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4", "1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf", "234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45", "4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1", "55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf", "592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964", "728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6", "89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d", "9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4", "b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb", "c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0", "d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32", "de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264", "e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3", "f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac", "f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876", "f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420", "fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "key": "<HKCU>\\Software\\<random, matching '[A-Z0-9]{14,16}'>", "value_name": "data"}, {"hashes": ["00d67af03245dd6534c74298f30d1ff751692489f3bc4fdcffbd7c0a1e825875"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "rtpwvwwhogtf"}, {"hashes": ["050a5eda3c39e42d4ef4a9876cbf7f047605d33fadea57378bd587fb6e266167"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "mfkjxwxbwxhl"}, {"hashes": ["1b9a20ac4dd2c0885a37a6eea6708e681ad5d87daa5832c3e485b82d403982bf"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "auuofrfpxpga"}, {"hashes": ["234bde430fe0e79e864f363da91dba762c9dbc16d0d27f39c25e0b2eaed1be45"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ptqkuujivrdl"}, {"hashes": ["08659d0df4f0e8b461e71d244607705b4072f89d67d622d67e2a4bac777a7af4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "drvviaftsold"}, {"hashes": ["55a0fb17516d2248c86647446e6a2b4b3b0ff8b647cc9d587e93a51a987a4baf"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "pnoaffeinikd"}, {"hashes": ["4417111dd73705942e5159c924edc2dbca6a4a357800615206ecd0f0cf69e4d1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "cxscnnveqfyi"}, {"hashes": ["728e14bc39f9f73e7ce018e2554dcc52ebf4402d0a628d63b84d115e4665f8b6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "pvhsambsbcdo"}, {"hashes": ["592ec29fbf68307cc62a234c11a414576801914ea7eaca2cc7a718178a11a964"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "mmjhrxrcofjm"}, {"hashes": ["89eaf4b2a5f24ecb1bc457131153e4d28eb45c1f420644962d84171243e9ec9d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "xnyovhadquol"}, {"hashes": ["9f0367ce8547db2fac3b4576be0f6ad0a0a7a45f8df1fa6801569ab4695fa4d4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "jstenvwpbygd"}, {"hashes": ["b677f845323a8495cbf34dda3dcc2b22d754e48daedab1a57f9ee60660f6b0cb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "hsxlqvjaicpf"}, {"hashes": ["c6685291a59b0a07c086fc983b6e7670773b084acbd8f851517190a47d9a14a0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "isrxbsoiwrah"}, {"hashes": ["d105aa073e3a3bbfd6d2e5d44edb57afa78c12d35317166ac1b99252d7badb32"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "hlbrcjftlxhb"}, {"hashes": ["e8919b70e94cba0d9ecc5118ee78c4a294904ae3b9f9e2ba244677cc6675b4d3"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "pyvlpfpiejsc"}, {"hashes": ["de80393b5703885b44ea52cb64c7741fae7df3d69a62b881aeb1b3e2b7628264"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "mxhyolmssavx"}, {"hashes": ["f29032c3627c700e1e6859d691b21215304e50e3cc115d70553dfb2709d38876"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "digiiykgsnya"}, {"hashes": ["f59fbb11eefe91704053576eba7787c33007c35dff55fe6e143795b1e075e420"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "yjcykdhdvpom"}, {"hashes": ["f28518ce845feea8c85785527694ea4144ca692e997ba8116ec2476c0a3fc0ac"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "rakkvibhhccm"}, {"hashes": ["fdcaffef5f259cd413eca0d48248e0f4afdfd4727d1b249d05394c3361c3bd7f"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "jnkrjqmbkgmx"}]}, "reports_count": 20}, "Win.Trojan.DarkComet-9835784-1": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": []}, {"bi": "pe-uses-visual-basic", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "process-hollowing-detected", "hashes": ["e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-darkcomet-mutex-detected", "hashes": ["e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": []}, {"bi": "excessive-logical-drive-enumeration", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": ["TA0007", "TA0009", "T1120", "T1025"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "malware-known-trojan-av", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "registry-autorun-key-modified", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "artifact-memory-vm-detect", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": ["TA0005", "T1112"]}, {"bi": "malware-darkcomet-detected", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-registry-detected", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "process-requested-softice", "hashes": ["e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "hook-installed", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "task-manager-disabled", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "mitre_attack_tags": ["TA0040", "T1499"]}, {"bi": "windows-util-attrib-hide", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "file-attribute-modification", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "disables-windows-firewall", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-editor-disabled", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "mitre_attack_tags": ["TA0040", "T1490"]}, {"bi": "modified-file-in-user-dir", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3"], "mitre_attack_tags": []}, {"bi": "registry-service-autostart-disabled", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "mitre_attack_tags": ["TA0005", "TA0040", "TA0003", "TA0004", "T1112", "T1574", "T1489"]}, {"bi": "disables-security-center-notifications", "hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "feed-domain-rat", "hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "pe-packed-upx", "hashes": ["e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "dns-query-nxdomain", "hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": []}, {"bi": "artifact-windows-component-suspicious-creation", "hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "mitre_attack_tags": ["TA0005", "TA0002", "T1036", "T1569"]}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "DarkComet and related variants are a family of remote access trojans designed to provide an attacker with control over an infected system. This malware can download files from a user's machine, mechanisms for persistence and hiding, and has the ability to send back usernames and passwords from the infected system.", "hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38", "4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0", "51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a", "ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e"], "iocs": {"domain": [{"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "host": "iguinho2br[.]ddns[.]net"}, {"hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6"], "host": "iguinho5br[.]ddns[.]net"}, {"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "host": "159753456[.]duckdns[.]org"}], "file": [{"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "path": "%APPDATA%\\dclogs"}, {"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\DCSCMIN"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Windows Update"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Windows Update\\Windows Update.exe"}, {"hashes": ["4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0"], "path": "\\Funcionales.txt"}, {"hashes": ["4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0"], "path": "\\TEMP\\Funcionales.txt"}, {"hashes": ["e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\DCSCMIN\\IMDCSC.exe"}, {"hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\System"}, {"hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\System\\System.exe"}, {"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\DCSCMIN\\svchost.exe"}], "ip": [{"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "ip": "191[.]214[.]59[.]60"}], "mutex": [{"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "name": "DCPERSFWBP"}, {"hashes": ["2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e"], "name": "_x_X_UPDATE_X_x_"}, {"hashes": ["2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e"], "name": "_x_X_BLOCKMOUSE_X_x_"}, {"hashes": ["2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38", "da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6", "e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e"], "name": "_x_X_PASSWORDLIST_X_x_"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "name": "DC_MUTEX-PULUJU8"}, {"hashes": ["e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "name": "DCMIN_MUTEX-P9EAUYB"}, {"hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "name": "DC_MUTEX-1WX0H9D"}, {"hashes": ["d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3"], "name": "Global\\22010b81-7887-11eb-b5f8-00501e3ae7b6"}, {"hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6"], "name": "DC_MUTEX-G1QC5LX"}, {"hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0"], "name": "Global\\2180bfc1-7887-11eb-b5f8-00501e3ae7b6"}, {"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "name": "DCMIN_MUTEX-3Q0C4QH"}], "registry": [{"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "key": "<HKCU>\\SOFTWARE\\DC3_FEXEC", "value_name": null}, {"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123", "e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "UserInit"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "EnableFirewall"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "DisableTaskMgr"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "DisableNotifications"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLUA"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "DisableRegistryTools"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": null}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "AntiVirusDisableNotify"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "UpdatesDisableNotify"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSCSVC", "value_name": "Start"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\CURRENTVERSION\\EXPLORERN", "value_name": "NoControlPanel"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\CURRENTVERSION", "value_name": null}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\CURRENTVERSION\\EXPLORERN", "value_name": null}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850", "e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Windows Update"}, {"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e", "e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "MicroUpdate"}, {"hashes": ["e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "DarkComet RAT"}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{C2E07548-CE4B-4D42-8086-CA4EC1EFF745}", "value_name": null}, {"hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{56B69936-1FC5-4818-B895-6BF908C7BDBA}", "value_name": null}, {"hashes": ["be9084c7690dd02b0d736de3c62af31bb659cc41792f2bde7220904ed87a4850"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{DEF7CEE1-C813-4177-B903-949CA400BA6D}", "value_name": null}, {"hashes": ["e03f896e5c48fe02572ba6962274d6cab334a1b6b0d1056f61ae4c032165f123"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{0158BD9E-288D-4BB7-92C6-4B96FDA2466F}", "value_name": null}, {"hashes": ["2e717d0f74fd277ff9575124bba61991958ec7438cd0ce9608e48f6658d10b38"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{E94A6EB7-F661-43FB-AD49-91527D444F20}", "value_name": null}, {"hashes": ["51f659dee1ae859322eaa7d983f364c39b5eb14640bcf5a2115043677c9a452a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{BD08F422-DE2C-46C0-B7B2-1B57D1FB0740}", "value_name": null}, {"hashes": ["e4f2a88f238a0c37d3b51ee539ee833c4ab623d1759a9eb3bc1f0bc26aa94b6e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{B95FCEE0-BF98-4FBD-9F1A-9C0C73A4B971}", "value_name": null}, {"hashes": ["d4492872d6e486a6a06b66c4ad2160cf14d0a5cc3b9b18bf7c44840f144809f3"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{E69157A7-FD4B-4D01-B695-CADE0634F7D0}", "value_name": null}, {"hashes": ["ace4cbea7e210e8b6820d18721cbffe1ec9d73d4be436e5b816718e934f66bdb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{538E0549-6D4F-441F-8143-092E1B65EE8E}", "value_name": null}, {"hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{E0BE5F21-20F4-4A15-8905-5C62AA1E0EDA}", "value_name": null}, {"hashes": ["e03c28a41fc715c6e2132cb9e4c0291aa640de725c4aaac73a5412a402fac4c6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{46D0D2C6-FCF7-41FE-9032-41B28DF41AEF}", "value_name": null}, {"hashes": ["e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{24303304-418E-4989-89B9-9749EA39AD18}", "value_name": null}, {"hashes": ["e31edf536be0c65728d4fdb6ca35d55b5a6f563764ff093d000225c84518f5b9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{C6DF298F-9A87-467E-86BC-4758A001C1BF}", "value_name": null}, {"hashes": ["da3c0198841e3a28ea19ed94ef22cf8bc23a46cbf89325592484c468050acca6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{51BBFC7C-4BC3-400D-995F-F5B912BAD2C4}", "value_name": null}, {"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{E5281EAF-74B8-4E6E-ABC6-F55B197DE170}", "value_name": null}, {"hashes": ["dba503a1c5aa6c7e81bf5bdf8b34b6be08ec62760ac68743c749de41c93894a0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{9ADD06C4-350B-4EB6-8062-5822ECEFC6D0}", "value_name": null}, {"hashes": ["253f0a3618aff5635616facf91f027c26857a201744bc0cc62f337e69697bf6e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{81DB00A7-749A-4519-850D-338A5493D0D8}", "value_name": null}, {"hashes": ["4f98b0f2a8d2587b2a81c3ecfd3ca9d86bc228642210c28ebbcf7d585b9340c0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MEDIAPLAYER\\HEALTH\\{65FA3A21-9DC8-445C-99A4-91C470EAC32D}", "value_name": null}]}, "reports_count": 13}, "Win.Trojan.Johnnie-9835771-0": {"bis": [{"bi": "artifact-flagged-sandbox", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "memory-execute-readwrite", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-uses-visual-basic", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-vm", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "artifact-vm-detect", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "process-hollowing-detected", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-file-in-user-dir", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "pe-invalid-checksum", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-data-dir", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "artifact-multiple-extensions", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": []}, {"bi": "audio-video-mutex-detected", "hashes": ["fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0009", "T1123", "T1125"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "dot-net-process-hollowing-detected", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "network-fast-flux-domain", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": []}, {"bi": "public-ip-address-identification-attempt", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": []}, {"bi": "regasm-network-connection", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": ["TA0005", "T1218"]}, {"bi": "network-snort-protocol", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "mitre_attack_tags": []}, {"bi": "malware-quasar-artifact-detected", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "mitre_attack_tags": []}, {"bi": "malware-quasarrat-mutex", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "mitre_attack_tags": []}, {"bi": "process-check-zone-identifier", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "mitre_attack_tags": ["TA0007", "T1518"]}, {"bi": "pe-packed-upx", "hashes": ["fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "cta-static-analyzer-malicious", "hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1"], "mitre_attack_tags": []}, {"bi": "pe-tls-callback", "hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-autorun-suspicious-public-ip", "hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718"], "mitre_attack_tags": []}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "enumeration-browser-information", "hashes": ["89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119", "T1552"]}, {"bi": "network-http-blank-user-agent", "hashes": ["89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "firefox-cookie-read", "hashes": ["89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "mitre_attack_tags": ["TA0009", "T1005", "T1119"]}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Johnnie, also known as Mikey, is a malware family that focuses on persistence and is known for its plugin architecture.", "hashes": ["02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6", "957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "iocs": {"domain": [{"hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "host": "ip-api[.]com"}, {"hashes": ["84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "host": "api[.]telegram[.]org"}, {"hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "host": "jvls111[.]duckdns[.]org"}, {"hashes": ["84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718"], "host": "ifconfig[.]me"}, {"hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "host": "hicham157484[.]ddns[.]net"}], "file": [{"hashes": ["02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc"], "path": "%APPDATA%\\Sdffghjh"}, {"hashes": ["02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc"], "path": "%APPDATA%\\Sdffghjh\\Dfghjm.exe.exe"}, {"hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "path": "%APPDATA%\\Logs"}, {"hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "path": "%APPDATA%\\Logs\\02-26-2021"}, {"hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "path": "%APPDATA%\\ProPlayer"}, {"hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "path": "%APPDATA%\\ProPlayer\\Player.exe.exe"}, {"hashes": ["c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1"], "path": "%APPDATA%\\SubDir"}, {"hashes": ["89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "path": "%PUBLIC%\\1lcuq8ab.default"}, {"hashes": ["89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "path": "%PUBLIC%\\1lcuq8ab.default\\key3.db"}, {"hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "path": "%TEMP%\\3oYra.exe"}, {"hashes": ["c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1"], "path": "%TEMP%\\d9qkc.exe"}, {"hashes": ["fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "path": "%APPDATA%\\systemwindows"}, {"hashes": ["fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "path": "%APPDATA%\\systemwindows\\system3284x.exe.exe"}], "ip": [{"hashes": ["02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc"], "ip": "185[.]157[.]161[.]223"}, {"hashes": ["63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "ip": "176[.]9[.]119[.]47"}, {"hashes": ["957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9", "f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "ip": "41[.]214[.]187[.]35"}, {"hashes": ["84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "ip": "216[.]239[.]36[.]21"}, {"hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08", "f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "ip": "208[.]95[.]112[.]1"}, {"hashes": ["84a0ce0c8d13e88841098cd0dd85f04c10bace1a1089dc8979ea861f11154718", "89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "ip": "149[.]154[.]167[.]220"}, {"hashes": ["fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "ip": "104[.]47[.]44[.]33"}, {"hashes": ["fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "ip": "104[.]47[.]22[.]161"}, {"hashes": ["c4e13001a7b07eee7899b452652fe0237daea585433d3beebad12c08101cfde1"], "ip": "99[.]84[.]104[.]9"}, {"hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "ip": "177[.]205[.]152[.]182"}], "mutex": [{"hashes": ["02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc"], "name": "7e61bc2deab4e7cd0dc639d7a5b55fb2"}, {"hashes": ["957bc7cad4e616e5c4324313e562ff0e11f06485dafcd9046b9a419b454490d9", "fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "name": "d34e21e39f8674ae445ef4586e824b83"}, {"hashes": ["baf003124429c4fe49b8b6c5f55762a54378d3c2e12c44ba2a5c8e8d5c33cf08"], "name": "QSR_MUTEX_RQqRXpXA09H8ybdO66"}, {"hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "name": "QSR_MUTEX_VFILHpbJA1ecN8j6ZY"}], "registry": [{"hashes": ["02d1d59d4f914110c644da1b0a45786e19117af0f85b11a50512c3331dce1bdf", "0875ccf6e7ec40f44b61856ebaed06e24de77e23ebbc37bea333c1d031adc8aa", "0f08d5275c8b15ed9811deec4831594295a41f18358131aa0a9885512513ecb1", "3f7ba1e949ef039ea3cd17ceb0b7c7e7ab28a8ab7a77b9ca57010565fd3b0972", "534fc6c2650565a2516f7b887520dbce8901d3a25222ebd62c6ea7d615d5d002", "585abdd3d76485473da6ffab5541b09403ccf2a7fcc2454851128b67474355b3", "63023f02535faf6f426362cbac34d265fd7224d9f49373d34417413cf0bf11a6", "96010837a8ab0aac445f9d6e8c79c0e6c273cef15bd65863d7e3875cf64fe7fb", "c482ebed5672bdbc0cca51b79bbb7babaa82a678142d981a7dd009ad813c20d7", "d3cd00872a3030e58c4699c48cdd7b2e70b2bbc3e2a558e16199f3d1fb6ea13e", "e1b58090537196f2c04a8c61074229ba663f475efdedeb4fcf853320f5e32104", "fc2007352826fdc2054f1d12c66b79638bb9ca185fb96a376a2ea341890035fc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "SdfggE4h"}, {"hashes": ["f810f4bb116a6d3453c6276f2c6863639f0228cf79c84b5f42ca0dc57fb2fbaf"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ProPlayer"}, {"hashes": ["89977d91a899a6381a107a4f2dea8d3611d4903564510b94a6b0b37c53032fa6"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "L9KogKMe"}, {"hashes": ["fda45d648f438c5435113e289c0d7b99d72dbe24c577c35b94d8ebc5fb74d40e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "systemwindows"}]}, "reports_count": 19}, "Win.Trojan.Remcos-9835542-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "pe-tls-callback", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "pe-certificate", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "pe-invalid-certificate-signature", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0005", "T1553"]}, {"bi": "feed-domain-rat", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "malware-remcos-mutex", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "mitre_attack_tags": []}, {"bi": "malware-remcos-path", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "mitre_attack_tags": []}, {"bi": "malware-remcos-registry", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "mitre_attack_tags": ["TA0009", "TA0006", "TA0011", "T1056", "T1113", "T1125", "T1123", "T1105"]}, {"bi": "network-opendns-malicious", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4"], "mitre_attack_tags": []}, {"bi": "html-js-uses-location-replace", "hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "mitre_attack_tags": ["TA0001", "T1189"]}, {"bi": "js-contains-massive-strings", "hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "html-js-document-location-href", "hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "mitre_attack_tags": ["TA0001", "T1189"]}, {"bi": "html-filesharing-webpage-detected", "hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "mitre_attack_tags": ["TA0001", "T1566"]}, {"bi": "network-dns-category-dynamic", "hashes": ["e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-obfuscation", "hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-dns-category-phishing", "hashes": ["e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71"], "mitre_attack_tags": []}, {"bi": "pe-certificate-invalid-signing-date", "hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71"], "mitre_attack_tags": []}, {"bi": "process-svchost-suspicious-launch", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "mitre_attack_tags": ["TA0005", "T1036"]}, {"bi": "network-dns-category-cnc", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "mitre_attack_tags": ["TA0011"]}, {"bi": "process-hollowing-detected", "hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "network-communications-http-get", "hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "url-forced-download-prompt", "hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "html-phishing-page", "hashes": ["657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "mitre_attack_tags": ["TA0001", "TA0005", "TA0003", "TA0004", "T1189", "T1078"]}, {"bi": "html-email-login-page", "hashes": ["657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "mitre_attack_tags": ["TA0007", "T1087"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-communications-http-post", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-dns-malicious-snort", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "http-response-client-error", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "file-ini-read", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "malware-lokibot-mutex-detected", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "suspicious-user-agent", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "windows-vault-api", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "malware-known-trojan-av", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "enumeration-browser-information", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119", "T1552"]}, {"bi": "network-dns-upload-file", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "malware-guloader-traffic-detected", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": []}, {"bi": "pe-uses-heavens-gate", "hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "mitre_attack_tags": ["TA0005", "T1027"]}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Remcos is a remote access trojan (RAT) that allows attackers to execute commands on the infected host, log keystrokes, interact with a webcam and capture screenshots. This malware is commonly delivered through Microsoft Office documents with macros sent as attachments on malicious emails.", "hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "iocs": {"domain": [{"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "host": "cdn[.]discordapp[.]com"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "host": "apps[.]digsigtrust[.]com"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "host": "apps[.]identrust[.]com"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "host": "login[.]live[.]com"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "host": "logincdn[.]msauth[.]net"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "host": "1drv[.]ws"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f"], "host": "marstonstyl247[.]ddns[.]net"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "host": "cds[.]d2s7q6s2[.]hwcdn[.]net"}, {"hashes": ["657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "host": "cs11[.]wpc[.]v0cdn[.]net"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "host": "auto[.]au[.]download[.]windowsupdate[.]com[.]c[.]footprint[.]net"}, {"hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71"], "host": "www[.]cloudflare[.]com"}, {"hashes": ["657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "host": "www[.]tm[.]a[.]prd[.]aadg[.]akadns[.]net"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "host": "style[.]ptbagasps[.]co[.]id"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "host": "takr[.]xyz"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "host": "wtql2a[.]db[.]files[.]1drv[.]com"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "host": "taker1[.]xyz"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "host": "wtr81q[.]db[.]files[.]1drv[.]com"}, {"hashes": ["8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "host": "necerfail[.]ddns[.]net"}, {"hashes": ["ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "host": "rem1[.]camdvr[.]org"}, {"hashes": ["8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "host": "8xzxsw[.]db[.]files[.]1drv[.]com"}, {"hashes": ["6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293"], "host": "cwzxas[.]ddns[.]net"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "host": "gunrunners[.]com"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "host": "www[.]worldfmafamily[.]com"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "host": "dynamic-guard[.]com"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "host": "www[.]dynamic-guard[.]com"}], "file": [{"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "path": "%PUBLIC%\\Libraries\\temp"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "path": "%APPDATA%\\remcos"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "path": "%APPDATA%\\remcos\\logs.dat"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%APPDATA%\\7C7955\\5D4644.lck"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-1160359183-2529320614-3255788068-500\\a18ca4003deb042bbee7a40f15e1970b_24e2b309-1719-4436-b195-573e7cb0f5b1"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%APPDATA%\\7C7955\\5D4644.exe (copy)"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%APPDATA%\\D282E1"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%APPDATA%\\D282E1\\1E80C5.lck"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-2580483871-590521980-3826313501-500\\a18ca4003deb042bbee7a40f15e1970b_d19ab989-a35f-4710-83df-7b2db7efe7c5"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%TEMP%\\DB1"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "path": "%APPDATA%\\microsoftwndddows98\\logs.dat"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "path": "%APPDATA%\\microsoftwndddows98"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%APPDATA%\\948R708F\\948logim.jpeg"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%APPDATA%\\948R708F\\948logrf.ini"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%APPDATA%\\948R708F\\948logrg.ini"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%APPDATA%\\948R708F\\948logri.ini"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%APPDATA%\\948R708F\\948logrv.ini"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "path": "%PUBLIC%\\Libraries\\Lyozm"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "path": "%PUBLIC%\\Libraries\\Lyozmest.exe"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "path": "%PUBLIC%\\Libraries\\mzoyL.url"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "path": "%PUBLIC%\\Libraries\\Nujpx"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "path": "%PUBLIC%\\Libraries\\Nujpxest.exe"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "path": "%PUBLIC%\\Libraries\\xpjuN.url"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%PUBLIC%\\Libraries\\Mturj"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%PUBLIC%\\Libraries\\Mturjest.exe"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "path": "%PUBLIC%\\Libraries\\jrutM.url"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "path": "%PUBLIC%\\Libraries\\Hlacz"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "path": "%PUBLIC%\\Libraries\\Hlaczest.exe"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "path": "%PUBLIC%\\Libraries\\zcalH.url"}, {"hashes": ["8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "path": "%PUBLIC%\\Libraries\\Xowbf"}, {"hashes": ["8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "path": "%PUBLIC%\\Libraries\\Xowbfest.exe"}, {"hashes": ["8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "path": "%PUBLIC%\\Libraries\\fbwoX.url"}, {"hashes": ["ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "path": "%PUBLIC%\\Libraries\\Ulbnx"}, {"hashes": ["ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "path": "%PUBLIC%\\Libraries\\Ulbnxest.exe"}, {"hashes": ["ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "path": "%PUBLIC%\\Libraries\\xnblU.url"}, {"hashes": ["6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293"], "path": "%PUBLIC%\\Libraries\\Afpeu"}, {"hashes": ["6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293"], "path": "%PUBLIC%\\Libraries\\Afpeuest.exe"}, {"hashes": ["6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293"], "path": "%PUBLIC%\\Libraries\\uepfA.url"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%PUBLIC%\\Libraries\\Axcli"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%PUBLIC%\\Libraries\\Axcliest.exe"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "path": "%PUBLIC%\\Libraries\\ilcxA.url"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852"], "path": "%PUBLIC%\\Libraries\\Tzegj"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852"], "path": "%PUBLIC%\\Libraries\\Tzegjest.exe"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852"], "path": "%PUBLIC%\\Libraries\\jgezT.url"}, {"hashes": ["e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f"], "path": "%PUBLIC%\\Libraries\\Puvrk"}, {"hashes": ["e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f"], "path": "%PUBLIC%\\Libraries\\Puvrkest.exe"}, {"hashes": ["e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f"], "path": "%PUBLIC%\\Libraries\\krvuP.url"}, {"hashes": ["e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7"], "path": "%PUBLIC%\\Libraries\\Ubjdt"}, {"hashes": ["e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7"], "path": "%PUBLIC%\\Libraries\\Ubjdtest.exe"}, {"hashes": ["e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7"], "path": "%PUBLIC%\\Libraries\\tdjbU.url"}], "ip": [{"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "ip": "192[.]35[.]177[.]64"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "ip": "162[.]159[.]135[.]233"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "ip": "168[.]235[.]93[.]122"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f"], "ip": "185[.]86[.]106[.]202"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "ip": "162[.]159[.]133[.]233"}, {"hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4"], "ip": "162[.]159[.]130[.]233"}, {"hashes": ["7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "ip": "162[.]159[.]129[.]233"}, {"hashes": ["3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f"], "ip": "162[.]159[.]134[.]233"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "ip": "20[.]190[.]151[.]8/31"}, {"hashes": ["657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "ip": "72[.]21[.]81[.]240"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "ip": "198[.]57[.]149[.]40"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "ip": "205[.]185[.]216[.]10"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "ip": "34[.]102[.]136[.]180"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "ip": "8[.]253[.]139[.]120"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "ip": "37[.]139[.]64[.]106"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "ip": "20[.]190[.]151[.]132"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "ip": "104[.]21[.]72[.]166"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c"], "ip": "172[.]67[.]153[.]81"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "ip": "172[.]67[.]209[.]115"}, {"hashes": ["3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b"], "ip": "104[.]21[.]23[.]61"}, {"hashes": ["8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "ip": "45[.]15[.]143[.]148"}, {"hashes": ["ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "ip": "107[.]175[.]32[.]204"}, {"hashes": ["6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293"], "ip": "104[.]168[.]219[.]213"}, {"hashes": ["657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "ip": "40[.]126[.]28[.]22"}, {"hashes": ["ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "ip": "217[.]64[.]151[.]37"}, {"hashes": ["657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0"], "ip": "40[.]126[.]7[.]35"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "ip": "172[.]106[.]57[.]18"}], "mutex": [{"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3b57bd6d92c2a6cd1cd8d7b363c8cce8280b189120a60d21720c9bbb869e2d71", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "5769abb7aea7315b8b5c1962bbcd032d4b98efd54c8251212dc2cf7a958cc58d", "657c44fbc121eac691e32be9aa80b9ca59d2018df9bf39e7f20e770fc1ede5a0", "7d1e6b971f1ba89d4856936cb52af3fe0d192bddbcdc4e50a4fa0ed4b73a5db4", "8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174", "d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "name": "Global\\<random guid>"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "name": "Remcos_Mutex_Inj"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "name": "Remcos-<random, matching [A-Z0-9]{6}>"}, {"hashes": ["03136321e9f72b3976adbea55e772f62655f2aa0c818ea7b8fde01866efea44c", "3d2e6ad45d5550ab3dec12e8e5614b64f8092e59e1baf28f669e3165b90d059b", "5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "name": "9DAA44F7C7955D46445DC99B"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "name": "3749282D282E1E80C56CAE5A"}, {"hashes": ["8823d2d80ce303874f653a5fc40282750c16fa200ab7710360b94db13d41f174"], "name": "-"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "name": "microsoftwndddows98-739KD5"}], "registry": [{"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "key": "<HKCU>\\Software\\Remcos-<random, matching '[A-Z0-9]{6}'>", "value_name": null}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "key": "<HKCU>\\Software\\Remcos-<random, matching '[A-Z0-9]{6}'>", "value_name": "exepath"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852", "6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293", "e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7", "e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f", "ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "key": "<HKCU>\\Software\\Remcos-<random, matching '[A-Z0-9]{6}'>", "value_name": "licence"}, {"hashes": ["6a81395a6d71c22ba7f3d60bc21c9e570cc3f8e99c8fccd7e22ea706b8cd0293"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Afpeu"}, {"hashes": ["e85c05924b360632e2236df2241e9247188130c201088e17cdc1fdf947e13e7f"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Puvrk"}, {"hashes": ["ef842b61ba7b4de87f9c6ab12cdd68e23c97ee6100b3eabcde0078537af9feb8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Ulbnx"}, {"hashes": ["d3450e04e93a383006b2cdb0b553418c64fe650f60d6974f22b3c2f8b406e0ed"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Axcli"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "key": "<HKCU>\\SOFTWARE\\MICROSOFTWNDDDOWS98-739KD5", "value_name": null}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "key": "<HKCU>\\SOFTWARE\\MICROSOFTWNDDDOWS98-739KD5", "value_name": "exepath"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "key": "<HKCU>\\SOFTWARE\\MICROSOFTWNDDDOWS98-739KD5", "value_name": "licence"}, {"hashes": ["07be92764c1950a945c482176e3af8612af246051313798b9d6eb1ba28b03852"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Tzegj"}, {"hashes": ["5b9e7e6c0cfcc90ccc80ca5d73ed9b8c4f1a9cd262b8f89e071978667bb0da44"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Mturj"}, {"hashes": ["e4eb73c0e476457f54c9e3a5df6b25ef839e3aac74465ca666c2b2c0bcaaa1f7"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Ubjdt"}, {"hashes": ["601244647083b44732e2ca2d443eb10d23a2fb55b11a1cc3f61a1ce1d4614f98"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Hlacz"}]}, "reports_count": 15}, "Win.Trojan.Zegost-9836868-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-section-execute-writable", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-service-with-autostart-created", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1574"]}, {"bi": "currentcontrolset-service-added", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1569", "T1547"]}, {"bi": "network-fast-flux-domain", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "deleted-submitted-file", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "malware-known-trojan-av", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "pe-section-shared", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "audio-video-mutex-detected", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0009", "T1123", "T1125"]}, {"bi": "registry-service-delete-flag-set", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0005", "TA0040", "TA0003", "TA0004", "T1112", "T1574", "T1489"]}, {"bi": "process-requested-direct-io", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": ["TA0007", "TA0005", "T1120"]}, {"bi": "network-snort-app-detect", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "mitre_attack_tags": []}, {"bi": "network-dns-safe-categories", "hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "mitre_attack_tags": []}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Zegost, also known as Zusy, uses man-in-the-middle attacks to steal banking information. When executed, it injects itself into legitimate Windows processes such as \"explorer.exe\" and \"winver.exe\". When the user accesses a banking website, it displays a form to trick the user into submitting personal information.", "hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702", "ff509d88baeb2e82a764b4d31e13f2af449ff0020530b46b6b0736ff15d94993"], "iocs": {"domain": [{"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "host": "conf[.]f[.]360[.]cn"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "host": "l531085863[.]gnway[.]net"}], "file": [{"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "path": "%ProgramData%\\DRM"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "path": "%ProgramData%\\DRM\\%SESSIONNAME%"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "path": "\\ekqylgghib"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "path": "\\ffpkqodtxg"}, {"hashes": ["acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "path": "\\cfrgkpesnc"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "path": "\\cwpiymrugv"}, {"hashes": ["8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e"], "path": "\\TEMP\\kwemrcfrgl"}, {"hashes": ["8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e"], "path": "%TEMP%\\hqngevjjrt.dat"}, {"hashes": ["8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e"], "path": "%SystemRoot%\\SysWOW64\\xuokjisljj"}, {"hashes": ["99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6"], "path": "\\TEMP\\pvklphtmdu"}, {"hashes": ["99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6"], "path": "%TEMP%\\sgvsnwykqw.dat"}, {"hashes": ["99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6"], "path": "%SystemRoot%\\SysWOW64\\xhtcfvybtu"}, {"hashes": ["99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6"], "path": "%SystemRoot%\\SysWOW64\\xyfjxswdga"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "path": "\\TEMP\\tnoyfogiqs"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "path": "%TEMP%\\bwvgodcojo.dat"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "path": "%SystemRoot%\\SysWOW64\\xlhcxxfawl"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "path": "\\TEMP\\oyldocywfk"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "path": "%TEMP%\\lchlhlphvg.dat"}, {"hashes": ["9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "path": "\\TEMP\\yrupfbxshf"}, {"hashes": ["9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "path": "%TEMP%\\exnotftmos.dat"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "path": "%SystemRoot%\\SysWOW64\\xcqxlwyhxx"}, {"hashes": ["9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "path": "%SystemRoot%\\SysWOW64\\xkfrtabflt"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "path": "%SystemRoot%\\SysWOW64\\xscfdtwjld"}, {"hashes": ["9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "path": "%SystemRoot%\\SysWOW64\\xsskcdecxo"}, {"hashes": ["acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "path": "\\TEMP\\qvoyjrkpde"}, {"hashes": ["acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "path": "%TEMP%\\oslytrpcpp.dat"}, {"hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "path": "\\TEMP\\xlogopqrcw"}, {"hashes": ["acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "path": "%SystemRoot%\\SysWOW64\\xrqaxfahmw"}, {"hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "path": "%TEMP%\\ppbqwwhibt.dat"}, {"hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "path": "%SystemRoot%\\SysWOW64\\xaoohyummg"}, {"hashes": ["bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d"], "path": "\\TEMP\\vrhsixorwr"}, {"hashes": ["bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d"], "path": "%TEMP%\\iybygqsnxe.dat"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "path": "\\TEMP\\rnhmvgpbcc"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "path": "%TEMP%\\uoyxqtyixo.dat"}, {"hashes": ["bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d"], "path": "%SystemRoot%\\SysWOW64\\xijrmumvax"}, {"hashes": ["bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d"], "path": "%SystemRoot%\\SysWOW64\\xqxluxotms"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "path": "%SystemRoot%\\SysWOW64\\xhqcjnbiau"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "path": "%SystemRoot%\\SysWOW64\\xpfvrqefnp"}, {"hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "path": "\\TEMP\\igwcybhpkn"}, {"hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "path": "%TEMP%\\yekmruyfjo.dat"}, {"hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "path": "%SystemRoot%\\SysWOW64\\xfudcimyoa"}], "ip": [{"hashes": ["8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "ip": "189[.]163[.]17[.]5"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "ip": "188[.]5[.]4[.]96"}, {"hashes": ["8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "ip": "180[.]140[.]209[.]249"}, {"hashes": ["99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "ip": "77[.]4[.]7[.]92"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "ip": "49[.]2[.]123[.]56"}, {"hashes": ["99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6"], "ip": "197[.]4[.]4[.]12"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "ip": "23[.]89[.]5[.]60"}], "mutex": [{"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "name": "eed3bd3a-a1ad-4e99-987b-d7cb3fcfa7f0 - S-1-5-18"}, {"hashes": ["8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "name": "Global\\b85042109_8086j"}, {"hashes": ["8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "name": "Global\\b-103707468_8086j"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "name": "Global\\b1610876348_8086j"}, {"hashes": ["99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "name": "Global\\b1543963725_8086j"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "name": "Global\\b947585585_8086j"}, {"hashes": ["99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6"], "name": "Global\\b201589957_8086j"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "name": "Global\\b1006983447_8086j"}, {"hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "name": "Global\\b808354297_8086j"}], "registry": [{"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "Start"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "ImagePath"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "WOW64"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "ObjectName"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "Type"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKU>\\.DEFAULT\\SOFTWARE\\MICROSOFT\\ACTIVEMOVIE\\DEVENUM", "value_name": "Version"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY\\PARAMETERS", "value_name": "Module"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "dElEtEflAG"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "ErrorControl"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "FailureActions"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY\\PARAMETERS", "value_name": null}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": null}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKU>\\.DEFAULT\\SOFTWARE\\MICROSOFT\\ACTIVEMOVIE", "value_name": null}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKU>\\.DEFAULT\\SOFTWARE\\MICROSOFT\\ACTIVEMOVIE\\DEVENUM", "value_name": null}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\COMFASTUSERSWITCHINGCOMPATIBILITY70", "value_name": null}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\COMFASTUSERSWITCHINGCOMPATIBILITY70", "value_name": "Description"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "Description"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695", "8a8131f46628e8ebffd01d7ff0c6efc6da6d6b791c718e0ba12f19f9877cd31e", "99eafc70b7c705d065a08eb4cfbefefacad8bd3af460a55ffb71cb8fbea79cd6", "9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f", "a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623", "acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9", "bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3", "bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d", "ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e", "ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FASTUSERSWITCHINGCOMPATIBILITY", "value_name": "DisplayName"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\TNOYFOGIQS", "value_name": null}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\TNOYFOGIQS", "value_name": "servicemaiN"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\TNOYFOGIQS", "value_name": "serviceDlL"}, {"hashes": ["0d953af7a6127ecadc963c6a97d6a917c534baa4adbfa8f6e5282e43ee9e9695"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\TNOYFOGIQS", "value_name": "module"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\OYLDOCYWFK", "value_name": null}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\OYLDOCYWFK", "value_name": "servicemaiN"}, {"hashes": ["9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\YRUPFBXSHF", "value_name": null}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\OYLDOCYWFK", "value_name": "serviceDlL"}, {"hashes": ["9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\YRUPFBXSHF", "value_name": "servicemaiN"}, {"hashes": ["a06faaa5e067b28477114974a32defee0db9396e0c5f3ab6214cdae6a5bdd623"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\OYLDOCYWFK", "value_name": "module"}, {"hashes": ["9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\YRUPFBXSHF", "value_name": "serviceDlL"}, {"hashes": ["9ce7574a1cc173fba870aae1102a8478a233cde2ba4a00e822737504bec9752f"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\YRUPFBXSHF", "value_name": "module"}, {"hashes": ["acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\QVOYJRKPDE", "value_name": null}, {"hashes": ["acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\QVOYJRKPDE", "value_name": "servicemaiN"}, {"hashes": ["acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\QVOYJRKPDE", "value_name": "serviceDlL"}, {"hashes": ["acc4368274d835bf2933f0947a2b00a231653d9b99acddfc3f571a6b24fea7f9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\QVOYJRKPDE", "value_name": "module"}, {"hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XLOGOPQRCW", "value_name": null}, {"hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XLOGOPQRCW", "value_name": "servicemaiN"}, {"hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XLOGOPQRCW", "value_name": "serviceDlL"}, {"hashes": ["bc2cf5e12dc6909713ec2e8604903f8658e632d10b48e4e69db9db3dacf259c3"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\XLOGOPQRCW", "value_name": "module"}, {"hashes": ["bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\VRHSIXORWR", "value_name": null}, {"hashes": ["bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\VRHSIXORWR", "value_name": "servicemaiN"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RNHMVGPBCC", "value_name": null}, {"hashes": ["bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\VRHSIXORWR", "value_name": "serviceDlL"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RNHMVGPBCC", "value_name": "servicemaiN"}, {"hashes": ["bfb192c22478da5ca8f31b090527f1b712dbafdac13635ffb4be1b01ddd8063d"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\VRHSIXORWR", "value_name": "module"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RNHMVGPBCC", "value_name": "serviceDlL"}, {"hashes": ["ce0ab235f99af9e723ee601475a4e50d6969a3944ebf1a1a6e64add2575d645e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RNHMVGPBCC", "value_name": "module"}, {"hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\IGWCYBHPKN", "value_name": null}, {"hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\IGWCYBHPKN", "value_name": "servicemaiN"}, {"hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\IGWCYBHPKN", "value_name": "serviceDlL"}, {"hashes": ["ddfaecd7c157b6f2e53c0ad0457e368d17a228d2c4752a5cd078a151ef1f2702"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\IGWCYBHPKN", "value_name": "module"}]}, "reports_count": 11}, "exprev": [{"count": 8576, "description": "Process hollowing is a technique used by some programs to avoid static analysis. In typical usage, a process is started and its obfuscated or encrypted contents are unpacked into memory. The parent then manually sets up the first stages of launching a child process, but before launching it, the memory is cleared and filled in with the memory from the parent instead.", "name": "Process hollowing detected"}, {"count": 5680, "description": "Crystalbit-Apple DLL double hijack was detected. During this attack, the adversary abuses two legitimate vendor applications, such as CrystalBit and Apple, as part of a dll double hijack attack chain that starts with a fraudulent software bundle and eventually leads to a persistent miner and in some cases spyware deployment.", "name": "Crystalbit-Apple DLL double hijack detected"}, {"count": 1617, "description": "A process associated with Microsoft Office, such as EXCEL.exe or WINWORD.exe, has started a Windows utility such as powershell.exe or cmd.exe. This is typical behavior of malicious documents executing additional scripts. This behavior is extremely suspicious and is associated with many malware different malware campaigns and families.", "name": "A Microsoft Office process has started a windows utility."}, {"count": 1484, "description": "A PowerShell command with a very long command line argument that may indicate an obfuscated script has been detected. PowerShell is an extensible Windows scripting language present on all versions of Windows. Malware authors use PowerShell in an attempt to evade security software or other monitoring that is not tuned to detect PowerShell based threats.", "name": "Excessively long PowerShell command detected"}, {"count": 568, "description": "An attempt to bypass application whitelisting via the \"Squiblydoo\" technique has been detected. This typically involves using regsvr32.exe to execute script content hosted on an attacker controlled server.", "name": "Squiblydoo application whitelist bypass attempt detected."}, {"count": 559, "description": "A process was injected into, most likely by an existing Kovter infection. Kovter is a click fraud Trojan that can also act as an information stealer. Kovter is also file-less malware meaning the malicious DLL is stored inside Windows registry and injected directly into memory using PowerShell. It can detect and report the usage of monitoring software such as wireshark and sandboxes to its C2. It spreads through malicious advertising and spam campaigns.", "name": "Kovter injection detected"}, {"count": 187, "description": "Gamarue is a family of malware that can download files and steal information from an infected system. Worm variants of the Gamarue family may spread by infecting USB drives or portable hard disks that have been plugged into a compromised system.", "name": "Gamarue malware detected"}, {"count": 172, "description": "An exploit payload intended to connect back to an attacker controlled host using tcp has been detected.", "name": "Reverse tcp payload detected"}, {"count": 103, "description": "DealPly is adware, which claims to improve your online shopping experience. It is often bundled into other legitimate installers and is difficult to uninstall. It creates pop-up advertisements and injects advertisements on webpages. Adware has also been known to download and install malware.", "name": "Dealply adware detected"}, {"count": 92, "description": "An attempt to exploit CVE-2019-0708 has been detected. The vulnerability, dubbed BlueKeep, is a heap memory corruption which can be triggered by sending a specially crafted Remote Desktop Protocol (RDP) request. Since this vulnerability can be triggered without authentication and allows remote code execution, it can be used by worms to spread automatically without human interaction.", "name": "CVE-2019-0708 detected"}, {"count": 36, "description": "Houdini/HWORM detected. This worm uses an obfuscated VBScript to drop additional malware such as njRAT.", "name": "Houdini/HWORM detected"}, {"count": 27, "description": "Maze ransomware has been detected injecting into rundll32.exe or regsvr32.exe. Maze can encrypt files on the victim and demand a ransom. It can also exfiltrate data back to the attacker prior to encryption.", "name": "Maze ransomware detected"}, {"count": 22, "description": "Smoke Loader has been detected. Smokeloader is used mainly to execute other malicious software, like ransomware or cryptocurrency miners. Its initial infection vector is usually an email with a malicious Microsoft Word document or delivered through an exploit kit. Smokeloader uses various plugins designed to steal data from its victims, particularly credentials stored on the system or transfered over HTTP, HTTPS, FTP, SMTP, POP3 or IMAP.", "name": "Smoke Loader detected"}, {"count": 18, "description": "An unknown adware family was detected. Adware displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware has also been known to download and install malware.", "name": "Unknown adware family detected"}, {"count": 17, "description": "A site commonly used by fileless malware to download additional data has been detected. Several different families of malware have been observed using these sites to download additional stages to inject into other processes.", "name": "Possible fileless malware download"}, {"count": 17, "description": "A malware dropper has been detected. A dropper will download or unpack addtional malware during it's execution. A variety of techniques can be employed for the payload to gain persistence and escalate privelege if neccessary.", "name": "Malware dropper detected"}, {"count": 15, "description": "Cobalt Strike is a tool used by both penetration testers and malicious actors. It has been observed being used to deliver Ryuk ransomware and other payloads.", "name": "Cobalt Strike activity detected"}, {"count": 9, "description": "IcedID is a banking Trojan. It uses both web browser injection and browser redirection to steal banking and/or other financial credentials and data. The features and sophistication of IcedID demonstrate the malware author's knowledge and technical skill for this kind of fraud, and suggest the authors have previous experience creating banking Trojans. IcedID has been observed being installed by Emotet or Ursnif. Systems infected with IcedID should also be scanned for additional malware infections.", "name": "IcedID malware detected"}, {"count": 6, "description": "Install core is an installer which bundles legitimate applications with offers for additional third-party applications that may be unwanted. The unwanted applications are often adware that display advertising in the form of popups or by injecting into browsers and adding or altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Installcore adware detected"}, {"count": 6, "description": "The certutil.exe utility has been detected downloading and executing a file. Upon execution, the downloaded file behaved suspiciously. The normal usage of certutil.exe involves retrieving certificate information. Attackers can use this utility to download additional malicious payloads.", "name": "Certutil.exe is downloading a file"}, {"count": 5, "description": "Corebot is a Trojan with many capabilities found in other prominent families. It features a plugin system to enable it to load a variety of features from the C&C server at any time. Known plugins include RAT capabilities such as taking desktop screenshots, as well as being able to intercept and modify browser communications and steal data, especially data related to banking.", "name": "Corebot malware detected"}, {"count": 5, "description": "Command line options indicating usage of XMRig Miner have been detected. Malware sometimes uses compromised hosts to mine for cryptocurrency on behalf of the attacker.", "name": "XMRig Miner Detected"}, {"count": 5, "description": "An exploit payload intended to connect back to an attacker controlled host using http has been detected.", "name": "Reverse http payload detected"}, {"count": 5, "description": "Trickbot is a banking Trojan which appeared in late 2016. Due to the similarities between Trickbot and Dyre, it is suspected some of the individuals responsible for Dyre are now responsible for Trickbot. Trickbot has been rapidly evolving over the months since it has appeared. However, Trickbot is still missing some of the capabilities Dyre possessed. Its current modules include DLL injection, system information gathering, and email searching.", "name": "Trickbot malware detected"}, {"count": 5, "description": "Bluestacks adware displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware has also been known to download and install malware.", "name": "Bluestacks adware detected"}], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2021-03-05T16:05:02+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Win.Ransomware.TeslaCrypt-9835471-1", "Win.Packed.Razy-9835522-0", "Win.Trojan.Remcos-9835542-0", "Win.Trojan.Zegost-9836868-0", "Win.Malware.Dridex-9837879-0", "Win.Trojan.Johnnie-9835771-0", "Win.Trojan.DarkComet-9835784-1", "Win.Malware.Kovter-9836073-0", "Win.Packed.Zbot-9836849-0"]}