{"Win.Dropper.DarkComet-9985655-1": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-filename-mismatch", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "pe-uses-dot-net", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "malware-known-trojan-av", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-vm", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "pe-tls-callback", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-darkcomet-detected", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-registry-detected", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-mutex-detected", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "malware-adware-av", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "registry-autorun-key-modified", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "registry-winlogon-key-value-modified-to-userinit", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "network-dns-safe-categories", "hashes": ["333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": []}, {"bi": "windows-util-attrib-hide", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "file-attribute-modification", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "pe-invalid-checksum", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc"], "mitre_attack_tags": []}, {"bi": "registry-service-autostart-disabled", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33"], "mitre_attack_tags": ["TA0005", "TA0040", "TA0003", "TA0004", "T1112", "T1574", "T1489"]}, {"bi": "registry-disable-windefender", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "disables-security-center-notifications", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "dns-dynamic-domain", "hashes": ["3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33"], "mitre_attack_tags": ["TA0011", "T1568"]}, {"bi": "registry-autorun-key-temp-dir", "hashes": ["d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "disables-windows-firewall", "hashes": ["3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "mitre_attack_tags": []}, {"bi": "registry-editor-disabled", "hashes": ["7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33"], "mitre_attack_tags": ["TA0040", "T1490"]}, {"bi": "modified-file-in-system-dir", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172"], "mitre_attack_tags": []}, {"bi": "startup-folder-modification", "hashes": ["3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "hosts-file-modification", "hashes": ["3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "feed-domain-rat", "hashes": ["8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "mitre_attack_tags": []}, {"bi": "task-manager-disabled", "hashes": ["7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33"], "mitre_attack_tags": ["TA0040", "T1499"]}, {"bi": "pe-encrypted-section", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "netbios-query", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "dns-query-nxdomain", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": []}, {"bi": "file-ini-read", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": []}, {"bi": "windows-vault-api", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0006", "T1003", "T1555"]}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "enumeration-browser-information", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119", "T1552", "T1539", "T1555"]}, {"bi": "compiler-vbc-run", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "process-check-browser-mail-client-files", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0007", "T1518"]}, {"bi": "malware-hawkeye-detected", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": []}, {"bi": "dot-net-process-hollowing-detected", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "malware-generic-infostealer", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119", "T1552"]}, {"bi": "network-communications-smtp", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-smtp-spambot", "hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4"], "mitre_attack_tags": []}, {"bi": "fake-explorer-process", "hashes": ["9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172"], "mitre_attack_tags": ["TA0005", "T1036"]}, {"bi": "decoy-wpfv", "hashes": ["3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c"], "mitre_attack_tags": ["TA0001", "T1566"]}, {"bi": "artifact-flagged-obfuscation", "hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "nginx-webserver-detected", "hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-communications-http-get", "hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-dns-category-parked-domain", "hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": []}, {"bi": "html-small-file-redirect", "hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "DarkComet and related variants are a family of remote access trojans designed to provide an attacker with control over an infected system. Capabilities of this malware include the ability to download files from a user's machine, mechanisms for persistence and hiding, and the ability to send back usernames and passwords from the infected system.", "hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31", "e7b7a267dd0b227979ffd87c0722f963060756d240b228a6866eec2f8dee25e4", "f01399967c66c3b57fa55694c3bab7706f3b35c52f6124c84d6ca9ba47860e42"], "iocs": {"domain": [{"hashes": ["0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "host": "djbusta[.]no-ip[.]org"}, {"hashes": ["23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d"], "host": "exphiltrate[.]no-ip[.]info"}, {"hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "host": "wannafucky[.]eu"}, {"hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4"], "host": "smtp[.]gmail[.]com"}, {"hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "host": "www[.]limitlessproducts[.]org"}, {"hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "host": "survey-smiles[.]com"}, {"hashes": ["9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172"], "host": "daynasmith[.]no-ip[.]biz"}, {"hashes": ["7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479"], "host": "markcms[.]no-ip[.]org"}, {"hashes": ["4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25"], "host": "wazdawg[.]no-ip[.]biz"}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33"], "host": "rats123[.]no-ip[.]org"}, {"hashes": ["591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51"], "host": "obsidian[.]no-ip[.]biz"}, {"hashes": ["d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16"], "host": "dcratfinal1414[.]no-ip[.]biz"}, {"hashes": ["cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa"], "host": "rayquazayeh[.]no-ip[.]biz"}, {"hashes": ["9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc"], "host": "iknightz[.]zapto[.]org"}, {"hashes": ["8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb"], "host": "whiteout[.]no-ip[.]biz"}, {"hashes": ["da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31"], "host": "i18[.]no-ip[.]biz"}, {"hashes": ["2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e"], "host": "sheepslaves[.]no-ip[.]biz"}, {"hashes": ["b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "host": "hogwild45[.]no-ip[.]biz"}, {"hashes": ["333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb"], "host": "420ratted[.]no-ip[.]biz"}, {"hashes": ["3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c"], "host": "estherr[.]no-ip[.]biz"}], "file": [{"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31"], "path": "\\IOP.exe"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31"], "path": "%APPDATA%\\dclogs"}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16"], "path": "%TEMP%\\MSDCSC"}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16"], "path": "%TEMP%\\MSDCSC\\msdcsc.exe"}, {"hashes": ["0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "path": "%System32%\\drivers\\etc\\hosts"}, {"hashes": ["3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "path": "%HOMEPATH%\\Documents\\MSDCSC"}, {"hashes": ["3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "path": "%HOMEPATH%\\Documents\\MSDCSC\\msdcsc.exe"}, {"hashes": ["0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\system"}, {"hashes": ["0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\system\\WinUpgrade.exe"}, {"hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "path": "%APPDATA%\\Microsoft\\Backups"}, {"hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4", "692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "path": "%TEMP%\\log.txt"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc"], "path": "%SystemRoot%\\SysWOW64\\MSDCSC"}, {"hashes": ["066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\MSDCSC"}, {"hashes": ["066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\MSDCSC\\msdcsc.exe"}, {"hashes": ["2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb"], "path": "%HOMEPATH%\\Favorites\\MSDCSC"}, {"hashes": ["2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb"], "path": "%HOMEPATH%\\Favorites\\MSDCSC\\msdcsc.exe"}, {"hashes": ["9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172"], "path": "%SystemRoot%\\SysWOW64\\explorer\\explorer.exe"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc"], "path": "%SystemRoot%\\SysWOW64\\MSDCSC\\CMD.exe"}, {"hashes": ["1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96"], "path": "%SystemRoot%\\SysWOW64\\sys64"}, {"hashes": ["1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96"], "path": "%SystemRoot%\\SysWOW64\\sys64\\cmd.exe"}, {"hashes": ["9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172"], "path": "%SystemRoot%\\SysWOW64\\explorer"}, {"hashes": ["3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c"], "path": "%TEMP%\\008.JPG"}], "ip": [{"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "ip": "205[.]237[.]57[.]95"}, {"hashes": ["7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479"], "ip": "94[.]73[.]34[.]195"}, {"hashes": ["b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "ip": "78[.]159[.]131[.]80"}, {"hashes": ["8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb"], "ip": "78[.]159[.]143[.]172"}, {"hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "ip": "199[.]59[.]243[.]222"}, {"hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "ip": "173[.]208[.]96[.]44"}, {"hashes": ["1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96"], "ip": "24[.]122[.]252[.]19"}, {"hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4"], "ip": "142[.]251[.]163[.]108"}], "mutex": [{"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31"], "name": "DC_MUTEX-<random, matching [A-Z0-9]{7}>"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16"], "name": "DCPERSFWBP"}, {"hashes": ["692e0c82782756d009cff6c6307c77af3438dc47f82d9a5b513b69ec11d2a869"], "name": "olipqhhvv"}, {"hashes": ["65f9cd4aae0b041b98340213f5b82e3ab7ad555cc7085f63937ded6ddce0fbb4"], "name": "snohitatusbkwujy"}], "registry": [{"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "23df138ff6fec0976438bc863fa8829b9b0f4b1165022d1b7b0a6f590dfec12c", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "333eec0b2d19cb7b97eeffc7b12eae83b705292e7d8e2fd816f495e69c6ddcdb", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "4b0122f4b81461761c354a6d5f4d82f9aa252949f18c4af0c0e84e63b5d4cf25", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "6b8ad68cf898b33980de5aedcec95c877839f6280d0ed142fede780504d1fe1d", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "8c69c1db04089d75a8196268c60c3ed879a910feadb8cc9c0c92f247701d30fb", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16", "da5474791d8d183f850d609e11d90c54bdda68aba0522e284e600471c324cd31"], "key": "<HKCU>\\SOFTWARE\\DC3_FEXEC", "value_name": null}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96", "2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2", "cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "UserInit"}, {"hashes": ["066be692f1bcb869dc47014379d24d073b013e2596f934ba0e44c060f3ff3c89", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "2cf568447e7fbba9deaa52ca020417e13f11948a2a371b429c72ae27a54e9abb", "3104d7ca6708a7a6e246fb9cc4f9037c76bf8b3eeb2af403b321798dec17fa0c", "591d974202517d8245ffc8e110a52c1f3586ecd9fd72e5db53539acdf16deb51", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9606c4c48d0f0d8d631d2e98dff3db11f12b4195114281d5baa01b879def95bc", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "MicroUpdate"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "AntiVirusDisableNotify"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "UpdatesDisableNotify"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSCSVC", "value_name": "Start"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\CURRENTVERSION\\EXPLORERN", "value_name": "NoControlPanel"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\CURRENTVERSION", "value_name": null}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc", "0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\CURRENTVERSION\\EXPLORERN", "value_name": null}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "EnableFirewall"}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "DisableNotifications"}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "DisableRegistryTools"}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": null}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "7c03348bdb4c7495f3043399bba3b6e5fea2740e2fee464c2b449649cf614479", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "DisableTaskMgr"}, {"hashes": ["0d4fc5dbfdabdc02710e2eeeeb1db3d0210c77423bff5976e2350bafd4684b33", "9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172", "b450c4ea6ea91b39d22d68b499e1f1d57229ac5f2091c6095f6cf42cb1e115c2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLUA"}, {"hashes": ["0305b3ab37f709d7ed33af5d71a45efdd7757961b310756552a9c83578ff5b4d", "3d05f037faebfa88b3b220081dfe503b96bc5df7e7a652136a67045062829eb9", "aeb842100ce2ae8e8ad4aad1451a41b86c4cafdedccc6495aea762c3610d4ac8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "WinUpgrade"}, {"hashes": ["2478d5f4fd1e2f26e6bfb1cc418f75d429401d8077ad79404d66a92acf847a1e", "d37d7c369c8b9023f42df51d5c6ea7ecd56b7fa8620f8861452521cb0378bc16"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "rundll32"}, {"hashes": ["cb5c7c8cfe7d9aeb56c0f353c6a38eb1bb90dd79949d6d25f45ee9289cbbdefa"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "System32dll"}, {"hashes": ["00734ce2147326f09599d17f3168a2597139f63699cee5345c177b4c533f20cc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "HLCK module"}, {"hashes": ["1ee322af4acb4442ffab0572847ad788a59e048b28ba8b1388b273249221ab96"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Hklc Module Key"}, {"hashes": ["9d43ba693dfdcb195c396090aa301bcc690336ae65e9d28450f9b92db23dc172"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "explorer.exe"}]}, "reports_count": 25}, "Win.Dropper.Formbook-9985599-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "pe-uses-dot-net", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "pe-header-linker-major", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "file-ini-read", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "mitre_attack_tags": []}, {"bi": "windows-vault-api", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "mitre_attack_tags": ["TA0006", "T1003", "T1555"]}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "enumeration-browser-information", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119", "T1552", "T1539", "T1555"]}, {"bi": "malware-generic-infostealer", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119", "T1552"]}, {"bi": "modified-file-in-user-dir", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "created-executable-sample-appdata", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "mitre_attack_tags": []}, {"bi": "artifact-windows-task", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "windows-util-schtask", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "windows-util-schtask-generic", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "task-pointed-to-appdata-directory", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "sc-service-stop-windefend", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "network-fast-flux-domain", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-obfuscation", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "public-ip-address-identification-attempt", "hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "registry-autorun-key-modified", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "process-check-zone-identifier", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0007", "TA0005", "T1518", "T1553"]}, {"bi": "process-hollowing-detected", "hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-data-dir", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "mitre_attack_tags": []}, {"bi": "firefox-cookie-read", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "mitre_attack_tags": ["TA0009", "T1005", "T1119"]}, {"bi": "process-created-executable-autorun", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "registry-autorun-suspicious-public-ip", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "mitre_attack_tags": []}, {"bi": "dot-net-process-hollowing-detected", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "network-communications-smtp", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-smtp-spambot", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "mitre_attack_tags": []}, {"bi": "network-telegram-domain-detected", "hashes": ["32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "nginx-webserver-detected", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "dns-query-nxdomain", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "http-response-client-error", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "deleted-executable-in-system-dir", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "network-http-blank-user-agent", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "http-response-redirect", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "process-windows-script-launched", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "malware-formbook-mutex-detected", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "network-explorer-process", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "microsoft-block-rule-list-app-executed", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "html-small-file-redirect", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "html-page-not-found", "hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "mitre_attack_tags": []}, {"bi": "network-smtp-attachment", "hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "antivirus-service-flagged-artifact-mid", "hashes": ["7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da"], "mitre_attack_tags": []}, {"bi": "enumeration-chat-program-information", "hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119", "T1552"]}, {"bi": "network-discord-domain-detected", "hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "dns-excessive-domain-queries", "hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "feed-domain-rat", "hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "malware-nanocore-artifact-detected", "hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "modified-file-in-program-dir", "hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}, {"bi": "dns-bypassed-assigned-server", "hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "dotnet-malicious-assembly-name", "hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Formbook is an information stealer that attempts to collect sensitive information from an infected machine by logging keystrokes, stealing saved web browser credentials, and monitoring information copied to the clipboard.", "hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "18a3c3a3ee44e382d899d905099a69c8e0e378363153eb1720d1faeef5a71c80", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1", "bb4fabecc410e116a6885d9935781646c6c5a363c885d4a97efa4261bfdd128b", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434", "ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca", "e9d7842178046601f88934e1e6f315c225323465be6fe64e00b1768567c5aebf"], "iocs": {"domain": [{"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "host": "api[.]ipify[.]org"}, {"hashes": ["32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "host": "api[.]telegram[.]org"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "host": "mail[.]xylometonline[.]gr"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "host": "discord[.]com"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]davisgeneral[.]store"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]kp34[.]vip"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]shiroyagi-app[.]net"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]homemaintenence[.]com"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]iforusers[.]com"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]favouritetee99[.]xyz"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]miami[.]rsvp"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]ferdat[.]com"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]bucketsnbouquets[.]com"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "host": "www[.]bearpawbeardco[.]com"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "host": "wiz121[.]ddns[.]net"}], "file": [{"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1"], "path": "%System32%\\Tasks\\Updates"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b", "4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1"], "path": "%TEMP%\\tmp<random, matching [A-F0-9]{1,4}>.tmp"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "path": "%ProgramFiles(x86)%\\AGP Manager\\agpmgr.exe"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "path": "%APPDATA%\\D19AB989-A35F-4710-83DF-7B2DB7EFE7C5\\Logs"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "path": "%APPDATA%\\D19AB989-A35F-4710-83DF-7B2DB7EFE7C5\\Logs\\Administrator"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "path": "%APPDATA%\\D19AB989-A35F-4710-83DF-7B2DB7EFE7C5\\run.dat"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "path": "%APPDATA%\\Skype"}, {"hashes": ["32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b"], "path": "%APPDATA%\\GsHLJkZ"}, {"hashes": ["32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b"], "path": "%APPDATA%\\GsHLJkZ\\GsHLJkZ.exe"}, {"hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2"], "path": "%APPDATA%\\ZlaRBfXtuZE.exe"}, {"hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2"], "path": "%System32%\\Tasks\\Updates\\ZlaRBfXtuZE"}, {"hashes": ["c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "path": "%APPDATA%\\jz5tktcy.0cg"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "path": "%APPDATA%\\Skype\\Skype.exe"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "path": "%APPDATA%\\us0zqags.ls2"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "path": "%APPDATA%\\us0zqags.ls2\\Firefox"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "path": "%APPDATA%\\us0zqags.ls2\\Firefox\\Profiles"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "path": "%APPDATA%\\us0zqags.ls2\\Firefox\\Profiles\\1lcuq8ab.default"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%APPDATA%\\rGxyJ"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "path": "%APPDATA%\\us0zqags.ls2\\Firefox\\Profiles\\1lcuq8ab.default\\cookies.sqlite"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%APPDATA%\\rGxyJ\\rGxyJ.exe"}, {"hashes": ["b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1"], "path": "%APPDATA%\\HRdTfCzD.exe"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%APPDATA%\\zz1tasa3.e3f"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%APPDATA%\\zz1tasa3.e3f\\Firefox"}, {"hashes": ["c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "path": "%APPDATA%\\jz5tktcy.0cg\\Firefox"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%APPDATA%\\zz1tasa3.e3f\\Firefox\\Profiles"}, {"hashes": ["c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "path": "%APPDATA%\\jz5tktcy.0cg\\Firefox\\Profiles"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%APPDATA%\\zz1tasa3.e3f\\Firefox\\Profiles\\1lcuq8ab.default"}, {"hashes": ["c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "path": "%APPDATA%\\jz5tktcy.0cg\\Firefox\\Profiles\\1lcuq8ab.default"}, {"hashes": ["b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1"], "path": "%System32%\\Tasks\\Updates\\HRdTfCzD"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%APPDATA%\\zz1tasa3.e3f\\Firefox\\Profiles\\1lcuq8ab.default\\cookies.sqlite"}, {"hashes": ["c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "path": "%APPDATA%\\jz5tktcy.0cg\\Firefox\\Profiles\\1lcuq8ab.default\\cookies.sqlite"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "path": "%APPDATA%\\pHWKYf.exe"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%APPDATA%\\14553a05.yak"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%APPDATA%\\14553a05.yak\\Firefox"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "path": "%System32%\\Tasks\\Updates\\pHWKYf"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%APPDATA%\\14553a05.yak\\Firefox\\Profiles"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%APPDATA%\\14553a05.yak\\Firefox\\Profiles\\1lcuq8ab.default"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%APPDATA%\\14553a05.yak\\Firefox\\Profiles\\1lcuq8ab.default\\cookies.sqlite"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%APPDATA%\\oonqj"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%APPDATA%\\oonqj\\oonqj.exe"}, {"hashes": ["65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5"], "path": "%APPDATA%\\UWFuPbyFEDfH.exe"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%APPDATA%\\dfQyHr.exe"}, {"hashes": ["65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5"], "path": "%System32%\\Tasks\\Updates\\UWFuPbyFEDfH"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "path": "%System32%\\Tasks\\Updates\\dfQyHr"}, {"hashes": ["32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b"], "path": "%APPDATA%\\xelxRStKAdq.exe"}, {"hashes": ["32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b"], "path": "%System32%\\Tasks\\Updates\\xelxRStKAdq"}, {"hashes": ["76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "path": "%APPDATA%\\PTnnlCpxYAW.exe"}, {"hashes": ["76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6"], "path": "%System32%\\Tasks\\Updates\\PTnnlCpxYAW"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%APPDATA%\\gyXSIbxnyRnFDJ.exe"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "path": "%System32%\\Tasks\\Updates\\gyXSIbxnyRnFDJ"}], "ip": [{"hashes": ["4b9899d778c58bbf3a6822530b2fcc1ecba297049d74e84ef5dce30eac3c8ec2", "a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "ip": "173[.]231[.]16[.]76"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44", "76b53b0d5379f62e06c382cbecf8d8e5900c05575f545881da8db594df2030e6", "7ecf2444570ef5d4de690d271bd88eb4f6819aad1acc3c3e382cd4e0471d75da"], "ip": "104[.]237[.]62[.]211"}, {"hashes": ["32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a", "c94fc73c5fcad1ab614fba37d9cc9c21f328c4787e39f3e3d673e1c408691434"], "ip": "149[.]154[.]167[.]220"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442", "20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "ip": "185[.]104[.]144[.]166"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "ip": "37[.]235[.]1[.]177"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "ip": "37[.]235[.]1[.]174"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "ip": "198[.]54[.]117[.]211"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "ip": "192[.]0[.]78[.]25"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "ip": "34[.]102[.]136[.]180"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "ip": "162[.]159[.]135[.]232"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "ip": "142[.]250[.]65[.]179"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "ip": "91[.]193[.]75[.]131"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "ip": "64[.]185[.]227[.]155"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "ip": "31[.]170[.]160[.]82"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "ip": "217[.]76[.]142[.]209"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "ip": "35[.]244[.]140[.]114"}], "mutex": [{"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "name": "8-3503835SZBFHHZ"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "name": "S-1-5-21-2580483-12441034466706"}, {"hashes": ["ddecfe4cc7384ea111ee90988969e06c3db18f782c4cd446ef720c4be5be0fca"], "name": "43O8B1TCW2XBV8C5"}, {"hashes": ["32f6848e3572b0e0bddab845c860fae280700446d1d04e5cb253270edd32022a"], "name": "VIFeIgKeLEykmegvqigXXPT"}, {"hashes": ["b0aadad0628bae4420e2c53b888017907cb318ef906560df71cbf17634f31dd1"], "name": "ETkIKz"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "name": "Global\\{562d3f5d-e645-4645-b571-86d856259c8f}"}, {"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "name": "KyHkIKu"}, {"hashes": ["65e9e0364afa672099d5920c57511d854b3f815d70135cbb08e562d1104c7ce5"], "name": "GEFveqIEBx"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "name": "sgcrlfpqsNOLJAUCfXfchdZSdUz"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "name": "ILDLahTnbnDORZnIDALLkJwrfeI"}], "registry": [{"hashes": ["1d815d0d8666918b92ba9ad7d998b096401ca509258d8526ac80289cb0c009a0"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "AGP Manager"}, {"hashes": ["32e2c5ac34b25d497c5383eeb0d444b9e011ec0e47764efc907e6955169f099b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "GsHLJkZ"}, {"hashes": ["a691f677c3659c9372fd4e4beb1004d19e368946e5cae0ad5e0e0d6a4f943e71"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Skype"}, {"hashes": ["0ca35b63c11c3cb981f833414ebed109ec0efaabb75780924a7265fc05e50442"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "rGxyJ"}, {"hashes": ["20097b824756d0ca9b24602aaadd51f0fcee82b663111fbbe506fe4243828a44"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "oonqj"}]}, "reports_count": 16}, "Win.Dropper.Remcos-9985482-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "pe-uses-armadillo", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0005", "TA0007", "T1027"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "process-hollowing-detected", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "pe-certificate", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "startup-folder-modification", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "startup-folder-lnk-file", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "pe-certificate-invalid-signing-date", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "pe-certificate-short-serial", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "process-check-zone-identifier", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0007", "TA0005", "T1518", "T1553"]}, {"bi": "dns-query-nxdomain", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "malware-remcos-mutex", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "malware-remcos-path", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": []}, {"bi": "windows-util-in-nonstandard-location", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0"], "mitre_attack_tags": ["TA0002", "T1204"]}, {"bi": "network-snort-indicator-compromise", "hashes": ["a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c"], "mitre_attack_tags": []}, {"bi": "pe-section-blank-name", "hashes": ["8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "mitre_attack_tags": []}, {"bi": "pe-invalid-certificate-signature", "hashes": ["e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "mitre_attack_tags": ["TA0005", "T1553"]}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Remcos is a remote access trojan (RAT) that allows attackers to execute commands on the infected host, log keystrokes, interact with a webcam, and capture screenshots. This malware is commonly delivered through Microsoft Office documents with macros, sent as attachments on malicious emails.", "hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835"], "iocs": {"domain": [{"hashes": ["2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "host": "2[.]habladourf[.]top"}, {"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6"], "host": "1[.]habladourf[.]site"}], "file": [{"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "path": "%APPDATA%\\remcos"}, {"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "path": "%APPDATA%\\remcos\\logs.dat"}, {"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed", "f8d991f61c31cb633f42b8c785eddb69291a3e3b75145f808d95bfea7acd9835"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Msconfig.lnk"}, {"hashes": ["2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "path": "%SystemRoot%\\SysWOW64\\sistema"}, {"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6"], "path": "%SystemRoot%\\SysWOW64\\sistem"}, {"hashes": ["ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sysmon.lnk"}], "ip": [], "mutex": [{"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "name": "Remcos_Mutex_Inj"}, {"hashes": ["2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "name": "ESDTRS_LBFGFPHXCSHDF-O7F47L"}, {"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6"], "name": "ERDATYFVUASG_AGSJHDJDJH-9CD4H1"}], "registry": [{"hashes": ["2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "key": "<HKCU>\\SOFTWARE\\ESDTRS_LBFGFPHXCSHDF-O7F47L", "value_name": null}, {"hashes": ["2b98c823d51c99b1eb8305988462ca4b0a597c2f56114bc0aed99ce8d871a4d2", "2db151154ebc21a5c46fb34ce54cf8a241807e30999376f416e2cd4063bb09a2", "39688fa546b5a1804f6b7502b727d0f2a9471d75978a27a3c506ab452131531d", "5148eaf77e047e4f36dcffc0014784c513070117bd9112bdd85ff54ada38fb6c", "578e14ca76fc1433e4851f2faf0e7fc68a0b61addf6b924e68b4fc44c0435669", "61567f6c5ee73824705c512977efeee6aef2ba5104325535dc38b3f805955203", "707d7dbf2fa8bc08563cdba2fb32de32ada565aede73d6c47cc179e50ba85ce9", "8ccd90ec52fa901879c0fbb2aa0ade3840ba7fd11c2dc4cc403e45ca593d15e7", "a29be6e95bf4b5ea871fcf5178f460d06707a1bc9cabe83f927f00d56311f903", "bbd6a71d973e4abd4a6b15554a7a626fbda87a3c63a1c51d262961feaca01538", "beec34ac224e49087df629ddd08148bcc794c1657272946e7e40c97ef16b480d", "e11c67b5ee7e8098dc837585a1a9c577786a75ac45855fe2a0648a4247f779ed"], "key": "<HKCU>\\SOFTWARE\\ESDTRS_LBFGFPHXCSHDF-O7F47L", "value_name": "EXEpath"}, {"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6"], "key": "<HKCU>\\SOFTWARE\\ERDATYFVUASG_AGSJHDJDJH-9CD4H1", "value_name": null}, {"hashes": ["1b480c54d5f4b68c37c1b95bbf0f38c47ac43eb6e6efea46ee3b8a7e9aea6062", "2fdcd42bbd8f619ef738ddc159f991eafa1a65f91a7bf8652be68a29e8db27df", "3279dce56733c11b458b9c80ecbce3393f342a0dd8509bcb7b5a5cf60744dbe0", "8c39e5e6945c8dbf57cbed0336c56ac27222c0a853696f2e7748dadcebcb84bf", "ab2d3fc9c682087a625efcaeafaf7bb66adab4836a299c31c33d2627b67397f6"], "key": "<HKCU>\\SOFTWARE\\ERDATYFVUASG_AGSJHDJDJH-9CD4H1", "value_name": "EXEpath"}]}, "reports_count": 18}, "Win.Dropper.TrickBot-9985782-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": []}, {"bi": "pe-uses-armadillo", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0005", "TA0007", "T1027"]}, {"bi": "file-ini-read", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0005"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "registry-autorun-key-modified", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "files-deleted-used-batch", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0005"]}, {"bi": "cmd-exe-file-execution", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "modified-file-in-system-dir", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-system-dir", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "pe-imports-toolhelp", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "file-ini-modified", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0003"]}, {"bi": "malware-trickbot-mutex", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "registry-ie-zone-settings-modified", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "windows-headless-iexplore", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "pe-section-execute-writable", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-linker-major", "hashes": ["47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975"], "mitre_attack_tags": ["TA0005", "T1027"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "TrickBot is a banking trojan targeting sensitive information for certain financial institutions. This malware is frequently distributed through malicious spam campaigns. Many of these campaigns rely on downloaders for distribution, such as VB scripts.", "hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "540f75edbe8544745b467d112c684d89ff74ed810f80a34281973113fcd880ed", "5700273ec58ea29524480c44f5d105ccc6108a557e8594b15ded71bd16119552", "5c4b08388d16ae983dc8525f0db669170ecd2ba4c5e6d7c80492491d803932fa", "5e18a687379a497abc1f1572029a9767f4201c03af845f37d6af2173ff70fea3", "5ecef65d120a6b308ac07d0d38142cebfe5c3400d6c2c55c6cedddadae14b49a", "613904f0a206287c1771a307f3864da7fb8f4064480a8a8d5c9378caffc22408", "64690db00e869d16acc393948e34f2555f92e71acf5ab3d7ba32cf66e576ab20", "651dccfef0fe9a4f1cf37bf92a5817299d4f6ab14ea3661205ac9a4f276b4024", "655ec3e6507b4f1d69d8efcc0d7c388ce1e5664bd0764c24db632528fdf9305a", "671848099111665a2cce05ba398cf9daff21e079dde1ff77772141bd74489af2", "67c527cf8ed7a6cc53a19a8e2cf101780ccf52e7e8bd9b239df7949b19001995", "69d4cbd5da912def364155cc107375d2a5581ac5bcdb2316b6415a5e5deceddb", "6a6f6dc3ea443b51c80afd655011640a0aca38ee0f20cb69834426a69e4d4dce", "6abe1f2fdca9838765a1d4623d61dccd57039d4ee5264607cb85494e34c32020", "6d244a1657ecfb0562abc8333e7007b2fde5add39cd9dbcd370949ca6daa7666", "712482d85179849a0fbf5a2393216143ae658f2ce9fc63713bcdf3dfbdb22f7a", "72e1d70ca077b65f356f807c02a8aab917dbc7968660453bf61665ed51480b2a", "75dfd3114dddb2647035b2e056dd4e5f192434a34f1824c9052c306b48f8e748", "77fa09695cbe29277eb49d98ebfac6c70af77c0d707e5c8bfc90c75c87afb402", "80854e427021e2073dd245c933da9098517281e8bbdead412cc90a556f998eae", "81a1bab246f6158cf7a7de6e28fc64bff9ec1944d874ebcaa4da1b850989c551", "82bb3421332441ebf2229f8639cc08cb0689f31faec47a4d4fa021dacf36334a", "83c312c673fd7e753368f43f424907b8448abe290eca2c73199b9179a2433c06", "8bbf3ac466abf5c75181c202276c428754202902a2d148f24af3cf82f02314b4", "8fa151bb71cdcd61b732c49573f30fdbdc354a012c2eb61d9c73d587b5ca0e35", "94b368e4e0e69a63798eefae67fa5f08346b690f05b33192fc057aa5af95f704", "97511848251f1bdc41bf7530dd53c5173b08d649d751439b837dc0546cfec395", "977ec3ad5e329c3de02043bae39af1a5664742815aef4d656e8214943975e362", "9e860e432588e41186b40bd2365a039f2c599fb50d075e984386761417776710", "a00d17ae8da03a1713072d68330adc492964e3e1b3b6d5f9c289076e7c0384c5", "a5c31e11dad16559d57a2a8a81dd7e8c5d839abc9df57f4ed2effa80a58c0d12", "a69ed782f90a23f58e4743f72c78c9b3d1cb1a3eaac8e3e615a975478ab6d8b5", "ad08737fa13f165469988dc272c0a4fc71dc9e8b1b810c8d61a487d425f547cd", "b5b2fb02bd854d9e5d58b56f9a56b09c7b7c5b7b7325aa24f92af9fe644a3c11", "b62540468efbe1ce8e197ce625b76d13adbf6d1f1db334148c3f9a79f46feaef", "b83d4c1d3cc93074442533a592ef12db125033a2852b58d5485e0802f6153797", "bb412606ddc8dec0fb77447e76460d644a165539a4fe76b68b79a4e13edb8c05", "bb59b7e3455e872a336aa0b9360221d4577f4ae74001369cf915ade1ae1e03e7", "c0baa0b424b9641ee4e8f248ce6a62a8b39b3f21c04ca9799bfc6ae12b4171e5", "c273e6284f303616f02acc02833f711c97ff42cbfc1d7919b358095171fff21d", "c35bec96144c0b6de38f20f7ef74dcd178c67714ee2c9bb2ccac4de4e4fd5cd2", "ccc5672b04f9ae6d93e9ac3ed531ba1044d6b8b64df21b917622914c7544cf57", "d072a85b676aaf59b96f8f86f6985ec40191e0943470cb6e43d82fdaa895029f", "d5399f762186dc8649eed117e38f88cf19908d68de6b8f05d56906440e5e12b7", "d9aa7b7da253bb8d67f52f59a004ec9b4fd52abcb33ddde6e3c47ae8e248bd95", "df5c2d1f396a7c209c24552e94f5c7c0d51e51c52ab74533f1f2a354cf69c31b", "dfc0a0df5a0ac6b3011396bcce8e8eb51f88fc7b36e369c4ac5ce4de3b573fdc", "e08657c543e3c7a5178997fc9e36b65ed49dd2c5a09fe99760e4c163d454b5f0", "e5708b38a4e853f6606276c4e1207b1dd0220077a3fa7af74dfc2a1cae5da8e9", "e5be3dfea29ae92d7c98f1921087c0baccc99b85b416e095c6fb2dc9da46ddd8", "e6573bac3296dfd0bba21bdf5d2ceeb99f6ab5546cfa30d7634272b7140771aa", "e954bbaa8d958f9f3c567674e83bf36e19df613b68eecf3b901e86ac35e34a50", "eaedca46c8d709e78ef5efb1e03bf61ef0a1a5bd4b3feabf3cd22707d2f03012", "ecdaa121dbd7ef37e27d4b15c9499832622d009780a6a816638ed3a3aaf8131c", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71", "f17fcf33757f675b35cdfc515e7e07b7c2f2f8bea0da01c71b3adbd76884cf09", "f499e345fdf04ed47cea849820e21fbdcea973cf4c221e797988a837183f654b", "f8d9a9efb72da43cdd057a3013590e7c08d38634632b465d20d533c016937756", "f937564ed7ffcf17590621f0ffb618d4e36a78e328f3a7415f29b8963349b629", "fab12e2d878c21ce8088dbdb9cf737625e3336645d9efd742b96a7f7bece0780", "fb6bf9144be832a3d3cf4654bf8b838d4442be2ba6a581a25b21e1c520a0debf", "fdea1498b39eb2e5cfd2b22afa7fecd5bda79934d41a502e2e98f303bf6e1490", "ffb84717bf5fc491a821d6cb6eb3d0dc29e15758ee74c0f0813c01c56d367f1e"], "iocs": {"domain": [{"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "host": "www[.]bing[.]com"}], "file": [{"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "path": "%SystemRoot%\\svchost.exe"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "path": "%TEMP%\\temp.bat"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "path": "%LOCALAPPDATA%\\n.ini"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "path": "%SystemRoot%\\SysWOW64\\n.ini"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "path": "%SystemRoot%\\SysWOW64\\n2.ini"}], "ip": [{"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "ip": "209[.]44[.]117[.]62"}, {"hashes": ["0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d"], "ip": "13[.]107[.]21[.]200"}], "mutex": [{"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "name": "dek390f0f928d92"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "name": "4356656577664"}], "registry": [{"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SEARCHSCOPES\\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}", "value_name": "FaviconPath"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SEARCHSCOPES\\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}", "value_name": "Deleted"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SEARCHSCOPES", "value_name": "DefaultScope"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "svchost"}, {"hashes": ["01ed0fb6882729acc463fa74bf7dbb4b2d52ecaf4a7b3a236795f8c719b9bae9", "0788af25244ad4ded923f262b5cbf9b2b7656474955a3ce9a8e1c8ce169dd438", "086a5e698a5fecd9718c60588fe7f0a7c2ad85b4261365f1e4f12dea219dd66c", "0ad8fbbb2cd9ae256f7ffd3e0d810c613ad4fccf25709710ae505ff702092298", "0d2d2c74d781dcf0a0fc85fbf0bb910ba9ae1e23c542bc82499f12c706f0389a", "117884e656b262ca26a5ea4fefb8887286485ffa34d8169489698cd3d7039056", "1358dc0e747e2078b7539ebefe1b26999126792558eb9a258d48e48f5c98a98b", "14dc10b01dfa144cba31539629add223e684dd146619b99cb0bc26b80474ec32", "174cfb475dd37c80eed33ed96172bf120a16c993ddca02079c76b235153115d7", "1b937d589376184eef0ec6e9ceef0f8bf8d70d6cd3c490693091993dd92c9645", "2181e72e0405d21a62379cb0c4e613e5637b8be516dff966482c414a14e24d34", "23d902f81f5ce0b068d5cfa2ce39c0f0bb36477a30b536b9140afe0f30033b83", "24355d268e634c5c183be4c32bda47706a33e062f2a6623769a3f42dd31c8ecc", "290194df30f49fa36735d1797d482ed1154edd036641b741eeedae69d4856ebc", "2a9b89880feba1f5cde7b572182bf1bfbca980ff89ca225d1fdef2cb5ffb569e", "2bb6e9eb5e1df6e887fd6b0600f9d8b4e42b7ad046798c9eb3461af6d14e2491", "345d93112129b4505272c4d63013f7855cd0cc94a39052ef4ad4a00182fde2c9", "372c42a76358f43ad5ffa7062562421a211f37d365892c4eb009743deb84abf7", "3a621078f9e229e7127c95bd5d3ab10bea2c81d852337bccd4edea64097b9975", "3e657cbcb60878485642fa589de30a396d7c09fb0c0a87d86a779f09c9fdbbb3", "47520b3363ae51ca763dc6cb152908e4a5f338088037923f4a500be9096a1bf1", "4803db6f1a75d0149269ae0ecc49c89d92b9c2fbae542ccd039790ee08a403b0", "4d1c5f2616d89fda8d513902653af4b1f8a7883ff0e67e4c347fef619ac4ddd3", "4f059ddd4cfce979e16286c7b0f7e91050c671852c5a2e9bc558405108d3508e", "51486749cd363361c102da2c8452c16034bbb8cf743ad4e063ea95f9d519b11d", "f01884d7c3799900314e5ce0de6ef238783bf07dc8c3a7692febd511842d4e71"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}", "value_name": null}]}, "reports_count": 26}, "Win.Dropper.XtremeRAT-9985707-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "53a8010c7cefbcc287750d57736fcfd750e25d456c2120fcc525bc70a63a70b0", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "53a8010c7cefbcc287750d57736fcfd750e25d456c2120fcc525bc70a63a70b0", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "53a8010c7cefbcc287750d57736fcfd750e25d456c2120fcc525bc70a63a70b0", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "pe-uses-visual-basic", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "53a8010c7cefbcc287750d57736fcfd750e25d456c2120fcc525bc70a63a70b0", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "pe-dos-header-paragraphs", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "53a8010c7cefbcc287750d57736fcfd750e25d456c2120fcc525bc70a63a70b0", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-file-in-user-dir", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "modified-executable", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-dns-safe-categories", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "process-hollowing-detected", "hashes": ["b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "registry-activesetup-key-modified", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "dns-dynamic-domain", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "mitre_attack_tags": ["TA0011", "T1568"]}, {"bi": "modified-file-in-system-dir", "hashes": ["f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "process-svchost-suspicious-launch", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "mitre_attack_tags": ["TA0005", "T1036"]}, {"bi": "potential-registry-persistence", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "mitre_attack_tags": ["TA0003"]}, {"bi": "process-with-multiple-children", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "mitre_attack_tags": ["TA0005"]}, {"bi": "malware-xtreme-rat-default-mutex-detected", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-system-dir", "hashes": ["f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "created-executable-in-user-dir", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-data-dir", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "decoy-wpfv", "hashes": ["f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093"], "mitre_attack_tags": ["TA0001", "T1566"]}, {"bi": "malware-known-trojan-av", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": []}, {"bi": "created-executable-sample-appdata", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "deleted-submitted-file", "hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "mitre_attack_tags": ["TA0005"]}, {"bi": "compound-vb-self-delete", "hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "mitre_attack_tags": []}, {"bi": "process-explorer-suspicious-launch", "hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "malware-darkcomet-mutex-detected", "hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "mitre_attack_tags": []}, {"bi": "artifact-multiple-extensions", "hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093"], "mitre_attack_tags": ["TA0005", "T1036"]}, {"bi": "netbios-query", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": []}, {"bi": "pe-packed-upx", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-encrypted-section", "hashes": ["f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5"], "mitre_attack_tags": []}, {"bi": "process-requested-softice", "hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "unsigned-roaming-execution", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": ["TA0005"]}, {"bi": "artifact-memory-vm-detect", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "network-fast-flux-domain", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": []}, {"bi": "registry-modification-reg", "hashes": ["2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "windows-util-attrib-hide", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "malware-darkcomet-detected", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-registry-detected", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "mitre_attack_tags": []}, {"bi": "file-attribute-modification", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "registry-winlogon-key-value-modified-to-userinit", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "process-long-cmdline", "hashes": ["2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "feed-domain-banking", "hashes": ["2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": []}, {"bi": "windows-firewall-modification", "hashes": ["2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-firewall-exceptions-enabled", "hashes": ["2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "shades-rat-detected", "hashes": ["2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": ["TA0005", "T1562", "T1112"]}, {"bi": "malware-dorkbot-cmd-detected", "hashes": ["2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "enumeration-vpn-program-information", "hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119", "T1552", "T1555"]}, {"bi": "registry-autorun-key-temp-dir", "hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "network-file-uploaded", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-communications-http-post", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "dns-public-server-contacted", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "http-response-redirect", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "mitre_attack_tags": []}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-dropper-andromeda-gamarue", "hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": []}, {"bi": "file-ini-read", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": []}, {"bi": "artifact-vm-detect", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "process-windows-script-launched", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "sample-pe-modified-on-disk", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "excessive-logical-drive-enumeration", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": ["TA0007", "TA0009", "T1120", "T1025"]}, {"bi": "process-wscript-nologo", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "windows-util-cscript-windows-vbscript", "hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "dns-query-nxdomain", "hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "mitre_attack_tags": []}, {"bi": "files-deleted-used-batch", "hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "mitre_attack_tags": ["TA0005"]}, {"bi": "excessive-sample-duplication", "hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "mitre_attack_tags": ["TA0005", "TA0003"]}, {"bi": "startup-folder-modification", "hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "network-communications-smtp", "hashes": ["35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-smtp-spambot", "hashes": ["35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e"], "mitre_attack_tags": []}, {"bi": "network-smtp-spambot-v2", "hashes": ["35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e"], "mitre_attack_tags": []}, {"bi": "files-created-batch", "hashes": ["837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "pe-vb-imports-toolhelp", "hashes": ["837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "mitre_attack_tags": ["TA0007", "T1057"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "XtremeRAT is a remote access trojan active since 2010 that allows the attacker to eavesdrop on users and modify the running system. The source code for XtremeRAT, written in Delphi, was leaked online and has since been used by similar RATs.", "hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b", "47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d", "53a8010c7cefbcc287750d57736fcfd750e25d456c2120fcc525bc70a63a70b0", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086", "b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "e1b1393cb8848954b45da1dd6f6fbc295debc9f1c7f5f90d62df0d76c976e641", "e9757b2f11e42fa684af449f1a36823abab2a21d9be5737031dfddf9db31e98c", "ed392f1a6de77ebd7f85fdacdb6dd313ea4782621662cccc68b8301d0fdcc6eb", "f1a8b6e6f710caad141a1290e1882a53b930c17a1b61a2800bbe66e17a39ee45", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "iocs": {"domain": [{"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "host": "entony[.]no-ip[.]org"}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "host": "sandra81[.]no-ip[.]org"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "host": "6noseqwa[.]no-ip[.]info"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "host": "kura[.]myftp[.]org"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "host": "cromitest[.]no-ip[.]org"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "host": "testmicro[.]no-ip[.]org"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "host": "x1221[.]zapto[.]org"}, {"hashes": ["35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e"], "host": "smtp[.]mail[.]yahoo[.]com"}, {"hashes": ["47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "host": "test"}, {"hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "host": "cmjc[.]whhcd[.]info"}, {"hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638"], "host": "chinato[.]no-ip[.]biz"}, {"hashes": ["47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "host": "asdawe"}, {"hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "host": "felloh[.]com"}, {"hashes": ["837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "host": "itsonmx[.]no-ip[.]biz"}, {"hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "host": "marques444[.]no-ip[.]org"}, {"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "host": "nickyowned[.]no-ip[.]org"}, {"hashes": ["47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "host": "legolas8[.]no-ip[.]biz"}, {"hashes": ["b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "host": "fatal555[.]no-ip[.]biz"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "host": "daniel157[.]no-ip[.]org"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "host": "infeccionmaestra[.]no-ip[.]org"}], "file": [{"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "path": "%SystemRoot%\\InstallDir"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "path": "%SystemRoot%\\InstallDir\\Server.exe"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "path": "%TEMP%\\Administrator7"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "path": "%TEMP%\\Administrator8"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "path": "%TEMP%\\Administrator2.txt"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "path": "%APPDATA%\\Administratorlog.dat"}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "path": "%APPDATA%\\Microsoft\\Windows\\E&bA09AzL.cfg"}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "path": "%SystemRoot%\\InstallDir\\webcam.exe"}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "path": "%APPDATA%\\Microsoft\\Windows\\E&bA09AzL.dat"}, {"hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "path": "%SystemRoot%\\SysWOW64\\install"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "path": "%APPDATA%\\MSDCSC"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "path": "%APPDATA%\\MSDCSC\\msdcsc.exe"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "path": "%APPDATA%\\Microsoft\\restore.exe"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "path": "%APPDATA%\\Microsoft\\rigsis"}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "path": "%APPDATA%\\Microsoft\\Windows\\7B8aP$W.cfg"}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "path": "%APPDATA%\\Microsoft\\Windows\\7B8aP$W.dat"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "path": "%APPDATA%\\logs.dat"}, {"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "path": "%APPDATA%\\Microsoft\\Windows\\((Mutex)).cfg"}, {"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "path": "%APPDATA%\\Microsoft\\Windows\\((Mutex)).dat"}, {"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "path": "%SystemRoot%\\SysWOW64\\Microsoft\\Plugin.exe"}, {"hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638"], "path": "%SystemRoot%\\SysWOW64\\install\\cmd.exe"}, {"hashes": ["837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "path": "%APPDATA%\\1.bat"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "path": "%SystemRoot%\\SysWOW64\\install\\plugin.exe"}, {"hashes": ["f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "path": "%TEMP%\\459sexy.jpg"}, {"hashes": ["f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "path": "%TEMP%\\459sexy.jpg.exe"}, {"hashes": ["47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "path": "%SystemRoot%\\systim.exe"}, {"hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "path": "%ProgramData%\\Local Settings\\Temp\\msiqaw.cmd"}, {"hashes": ["837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "path": "%SystemRoot%\\win001.exe"}, {"hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\A-742139997.exe"}, {"hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "path": "%TEMP%\\temp-742139997.bat"}, {"hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "path": "%APPDATA%\\A-742139997.exe"}, {"hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\A-742139997.exe"}, {"hashes": ["bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "path": "%SystemRoot%\\263[immagini.4ever.eu] donna cinese, donna sexy, lingeria nera, giarrettiera 153510.jpg"}, {"hashes": ["bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "path": "%SystemRoot%\\263[immagini.4ever.eu] donna cinese, donna sexy, lingeria nera, giarrettiera 153510.jpg.exe"}, {"hashes": ["b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093"], "path": "%APPDATA%\\Microsoft\\Windows\\%h2FmB8N.cfg"}, {"hashes": ["b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093"], "path": "%SystemRoot%\\558[immagini.4ever.eu] donna cinese, donna sexy, lingeria nera, giarrettiera 153510.jpg"}, {"hashes": ["b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093"], "path": "%SystemRoot%\\558[immagini.4ever.eu] donna cinese, donna sexy, lingeria nera, giarrettiera 153510.jpg.exe"}, {"hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "path": "%TEMP%\\InstallDir\\Intff.exe"}, {"hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "path": "%APPDATA%\\Microsoft\\Windows\\o7wlDCaHb.cfg"}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651"], "path": "%SystemRoot%\\826[immagini.4ever.eu] donna cinese, donna sexy, lingeria nera, giarrettiera 153510.jpg"}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651"], "path": "%SystemRoot%\\826[immagini.4ever.eu] donna cinese, donna sexy, lingeria nera, giarrettiera 153510.jpg.exe"}, {"hashes": ["b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093"], "path": "%APPDATA%\\Microsoft\\Windows\\%h2FmB8N.dat"}, {"hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "path": "%APPDATA%\\Microsoft\\Windows\\o7wlDCaHb.dat"}, {"hashes": ["b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "path": "%SystemRoot%\\SysWOW64\\windowsup\\expl0re.exe"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "path": "%APPDATA%\\Microsoft\\Windows\\6@!sG.cfg"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "path": "%SystemRoot%\\628[immagini.4ever.eu] donna cinese, donna sexy, lingeria nera, giarrettiera 153510.jpg"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "path": "%SystemRoot%\\628[immagini.4ever.eu] donna cinese, donna sexy, lingeria nera, giarrettiera 153510.jpg.exe"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "path": "%APPDATA%\\MSN\\messenger.exe"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "path": "%APPDATA%\\Microsoft\\Windows\\6@!sG.dat"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "path": "%TEMP%\\Win7Ultimate Activator.exe"}], "ip": [{"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "ip": "78[.]159[.]140[.]203"}, {"hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "ip": "75[.]2[.]70[.]75"}, {"hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "ip": "99[.]83[.]190[.]102"}, {"hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "ip": "20[.]72[.]235[.]82"}, {"hashes": ["35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e"], "ip": "66[.]218[.]88[.]167"}, {"hashes": ["35b8b14994340558a4c89dfc7a74022c4b61b54eda1888d3c67191a3f2b3849e"], "ip": "66[.]163[.]170[.]52"}], "mutex": [{"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971", "3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "name": "XTREMEUPDATE"}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "name": "E&bA09AzL"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "name": "<random, matching '[A-Z0-9]{14}'>"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "name": "DCPERSFWBP"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "name": "H9MOWGZL8K"}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "name": "7B8aP$W"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "name": "MUTEX-CC3DTGP"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "name": "_x_X_BLOCKMOUSE_X_x_"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "name": "_x_X_PASSWORDLIST_X_x_"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "name": "_x_X_UPDATE_X_x_"}, {"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "name": "((Mutex))"}, {"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "name": "((Mutex))PERSIST"}, {"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "name": "((Mutex))EXIT"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "name": "***MUTEX***"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "name": "***MUTEX***_PERSIST"}, {"hashes": ["af595be13be2f8f0162f8637e1351b49a8b600c3bc56e46e5e84eff701b0dc2a"], "name": "***MUTEX***_SAIR"}, {"hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "name": "2562100796"}, {"hashes": ["43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32"], "name": "lol"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "name": "WIN7LDRMU"}, {"hashes": ["47ae5d6d81fb747783a91ad8058392e744c5251d902462699a368149eb568c6d"], "name": "vb9WpnVgQidk5"}, {"hashes": ["b77d0aec4c12a67d03a160477c8f9eea980b231807883aba297fe49098127086"], "name": "Global\\23832241-a080-11ed-9660-0015175300e7"}, {"hashes": ["9dd25c03f613b0ea7c7cb945f2eefbae477311620e1e0f40bf2b4a11b9ebbba5"], "name": "Global\\23d41101-a080-11ed-9660-001517d40a31"}, {"hashes": ["837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "name": "WindowsFir3ewal442363333463"}, {"hashes": ["c16b9881099cebcb44b9f0ed252aa19b7e1d3149452af3991613e40409e630e1"], "name": "MAIN_-742139997"}, {"hashes": ["b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093"], "name": "%h2FmB8N"}, {"hashes": ["b7f052381885a6ee33286419bf8c82e53813c740f7b6788e9f66cdb56dcf031e"], "name": "Global\\237bfe21-a080-11ed-9660-0015174a5faf"}, {"hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "name": "o7wlDCaHb"}, {"hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "name": "o7wlDCaHbPERSIST"}, {"hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "name": "o7wlDCaHbEXIT"}, {"hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638"], "name": "522S38XR552J26_PERSIST"}, {"hashes": ["7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638"], "name": "522S38XR552J26_SAIR"}, {"hashes": ["b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "name": "CH5M1F6ALN6YME_PERSIST"}, {"hashes": ["b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "name": "CH5M1F6ALN6YME_SAIR"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "name": "6@!sG"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "name": "567I3V684SNT81_PERSIST"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "name": "567I3V684SNT81_SAIR"}], "registry": [{"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "HKLM"}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3", "6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "b6f64caae4854d4960307e864df0e4d296edab9f17793027edb4c2508ab7f093", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "HKCU"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "43e478681ce21820e20c1ab0bd9dc95de8ba613ea34a51b0bde1904a1b7e9c32", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": null}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0", "7cf80b7f6acba3932a6469756748868a0fbb65283113cc6d162c8ad2d0af6638", "b27c07bd657d797e5c19109f32201701097acedb21ae286c4a9aec3b66e08d80"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a", "837fc6394f9b1ac11a99a5938a8b026c4b97f8847000ffec538a9a0909761e3b"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS", "value_name": null}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "key": "<HKCU>\\SOFTWARE\\E&BA09AZL", "value_name": null}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{NH8ONC0M-V2S2-AQ8L-8OGF-WNY1SA685WDT}", "value_name": null}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{NH8ONC0M-V2S2-AQ8L-8OGF-WNY1SA685WDT}", "value_name": "StubPath"}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "key": "<HKCU>\\SOFTWARE\\E&BA09AZL", "value_name": "InstalledServer"}, {"hashes": ["3b6fe25066ec58e347a7c6df3a54e011f1d3a7bacc80a17ece9f2e6c3c0a0766", "d7721a3b2666ac0e6d88c15312f8dbcb4285849f3b1c87f2e8e765cb62a96c6d", "f784c5d21472046399c22694543cb125002ecd5d213cb98e601957a610267747"], "key": "<HKCU>\\SOFTWARE\\E&BA09AZL", "value_name": "ServerStarted"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "key": "<HKCU>\\SOFTWARE\\DC3_FEXEC", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "DoNotAllowExceptions"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "UserInit"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\INSTALL", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "restore"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "restore"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "restore"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{02CEEFAF-818E-BDBC-F997-0A95FB467D1E}", "value_name": "StubPath"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{02CEEFAF-818E-BDBC-F997-0A95FB467D1E}", "value_name": "StubPath"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\SRVID\\ID", "value_name": "H9MOWGZL8K"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\restore.exe"}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\SRVID", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\SRVID\\ID", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\INSTALL\\DATE", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{02CEEFAF-818E-BDBC-F997-0A95FB467D1E}", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{02CEEFAF-818E-BDBC-F997-0A95FB467D1E}", "value_name": null}, {"hashes": ["24b34a24aa2ee2ca545a17a0eb348177322d90e638f5aa7bac69da72781d9b38", "2c89b3049c5575c4f46c1a0e542966f8eb0481e0e2416e462d0d1de0582eb38a"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\INSTALL\\DATE", "value_name": "H9MOWGZL8K"}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "key": "<HKCU>\\SOFTWARE\\7B8AP$W", "value_name": null}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{R25436YG-42E1-67BX-D0AE-155U24M8442M}", "value_name": null}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{R25436YG-42E1-67BX-D0AE-155U24M8442M}", "value_name": "StubPath"}, {"hashes": ["88707801058d1b8b55ad3fed37ec727d1bf784cf9942965779a51df69ce4c651", "bebdaf0564b486a23a8e42b4a490db0f147ed1ec9a4fa6581de415b444dd7282"], "key": "<HKCU>\\SOFTWARE\\7B8AP$W", "value_name": "InstalledServer"}, {"hashes": ["0b003ca58ea39b22dc1762d60193b9a9cba6ad543321df6388bb3cfd81eb1a40", "477a1303031a8019c78b0c1c6d62d5dc7e21a89f8ef3a85bbb5230f4789cc72b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "SYSTEM"}, {"hashes": ["301a64e86b283b132b960d1d5341d58d4c450632430da8b3f5002da0a3025971"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{WPX06OG4-T624-J08N-O4V8-M5640630KL7C}", "value_name": "StubPath"}, {"hashes": ["47345e7ea05a113892e6420a1a74596c9a94e4dad54ddab33cd6229f6451afd3"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{VG41FSC6-04F5-IUYP-UEEI-78X4GQ1S5J0K}", "value_name": "StubPath"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{0872E60J-FR1K-1K15-SD6L-368G54V47Q0V}", "value_name": null}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "key": "<HKCU>\\SOFTWARE\\6@!SG", "value_name": "ServerStarted"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{0872E60J-FR1K-1K15-SD6L-368G54V47Q0V}", "value_name": "StubPath"}, {"hashes": ["6577d660cda14fc5e8737068fc275b3791b413f8f4576826a236e351dbd842a7"], "key": "<HKCU>\\SOFTWARE\\6@!SG", "value_name": "InstalledServer"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{872O0200-H88B-XB1Y-6267-Y8Q66KC6WN0A}", "value_name": null}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "Firewall"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "Firewall"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Firewall"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Firewall"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{872O0200-H88B-XB1Y-6267-Y8Q66KC6WN0A}", "value_name": "StubPath"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKCU>\\SOFTWARE\\WIN7", "value_name": null}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKCU>\\SOFTWARE\\WIN7", "value_name": "FirstExecution"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKCU>\\SOFTWARE\\WIN7", "value_name": "NewIdentification"}, {"hashes": ["37f75e81fc7a8a9dae5965adbe61b5daebfee49e8bd94b729c87fb66711782e0"], "key": "<HKCU>\\SOFTWARE\\WIN7", "value_name": "NewGroup"}]}, "reports_count": 26}, "Win.Packed.Shiz-9985661-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "nginx-webserver-detected", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "dns-excessive-domain-queries", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "excessive-dns-query-nxdomain", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-dns-category-parked-domain", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "network-dns-upload-file", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified-nt", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "network-dns-category-cnc", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0011"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "pe-imports-toolhelp", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "registry-winlogon-key-value-modified-to-userinit", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "malware-shiz-mutex-detected", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-points-to-temp", "hashes": ["fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "registry-ie-lock-toolbar", "hashes": ["c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a"], "mitre_attack_tags": ["TA0009"]}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Shiz is a remote access trojan that allows an attacker to access an infected machine in order to harvest sensitive information. It is commonly spread via droppers or by visiting a malicious site.", "hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "iocs": {"domain": [{"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "xutulenuqix[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "purijygirem[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "dimasyhageh[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "ciqofymosip[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "vonerymekix[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "novubymyvip[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "fobyqyhezem[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "gacucuhumeg[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "maxilumiriz[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "jelojujopen[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "qekafuqafit[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "ryhyruqeliz[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "kejepujajeg[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "tufibiqunit[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "lygumujycen[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "xudoxijiwef[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "pupoliqotul[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "citahikodab[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "direfiwahur[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "vowypikelaf[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "foqurowyxul[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "nomimokubab[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "ganovowuqur[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "jecekorosuk[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "qexeholagav[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "cilicofahev[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "vojajofyced[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "dikolobeliw[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "fogefobunik[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "gadurabotiw[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "nofypafiqev[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "jepobanagij[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "masimafoded[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "ryqehegubes[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "qetoxagekec[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "keralanyxiq[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "lymyfenumij[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "xubirenosiq[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "tunupegirec[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "puvomegagep[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "cicavemejih[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "dixexehyzex[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "fokyhyhumap[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "volekymyvum[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "nojudymiwuh[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "gahipyhopax[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "magowymafum[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "jefamyjejat[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "kepyxujycaz[.]eu"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "host": "rytukuqunun[.]eu"}], "file": [{"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "path": "%TEMP%\\<random, matching [A-F0-9]{1,4}>.tmp"}], "ip": [{"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "ip": "85[.]94[.]194[.]169"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "ip": "13[.]107[.]21[.]200"}, {"hashes": ["5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a"], "ip": "45[.]33[.]30[.]197"}, {"hashes": ["61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "ip": "45[.]79[.]19[.]196"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa"], "ip": "198[.]58[.]118[.]167"}, {"hashes": ["34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa"], "ip": "45[.]33[.]23[.]183"}, {"hashes": ["07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "ip": "173[.]255[.]194[.]134"}, {"hashes": ["34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a"], "ip": "96[.]126[.]123[.]244"}, {"hashes": ["a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a"], "ip": "45[.]33[.]2[.]79"}, {"hashes": ["41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e"], "ip": "45[.]33[.]18[.]44"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816"], "ip": "45[.]33[.]20[.]235"}, {"hashes": ["07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e"], "ip": "72[.]14[.]178[.]174"}, {"hashes": ["b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4"], "ip": "72[.]14[.]185[.]43"}], "mutex": [{"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "name": "Global\\674972E3a"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "name": "Global\\MicrosoftSysenterGate7"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "name": "internal_wutex_0x000004b4"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "name": "internal_wutex_0x0000043c"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "name": "internal_wutex_0x<random, matching [0-9a-f]{8}>"}, {"hashes": ["07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "name": "internal_wutex_0x000004dc"}], "registry": [{"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT", "value_name": "67497551a"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "98b68e3c"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "userinit"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "System"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS", "value_name": "load"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS", "value_name": "run"}, {"hashes": ["012d19e704484b2a39d31eba8750a9b9353c07bdf08ec7d4d6311affaf7346ae", "07ffe0a9e57b4927cd20e8fabc42bcaea97c53bc0610877a3f1d494cd1dbccac", "34e4dece416c68fa10acb6943d246fca0b942f46fe3664aaff2c344a630d3e5a", "41fa3bac3b7e6712374e169e011756964d438f6e4162c2ae415fe904f39f358f", "5518dff75f344e50f2fbeb774c59a16af35c639c8726b1612fe58d75dbb385ef", "61d31cf35be8192577483807a9b4d2b1caf79b7851b83e69dfb2f12581eb96ed", "9819e088abf6eb464827532f5d1b8741e4a6197dcc75e0f1a9b54c1befa6a7b7", "989063d88c9bcbb080c62d3b19f9e26815072acd72a95bda3b2023f42339119a", "a2402cbb04576c9732889e17ba36e459137473975bd9b68ced4232d54af7355e", "a658dd42692e13ee1fcd77624943431970b8c4b9a51c375325bc0095f5578c5b", "b54cb741d49045e5d78dc09db3d449c0389037501d97431fa3743f833c0d0d3e", "b910095a1bf7f0bbe924f08fbba04a05cda37e2175334ac3cd5a07667c8c24d4", "be283aa132e7f648bf15e50da41499af44b12148d23d3b7c509d1e596ea679aa", "c1cf08c50b93e9ad1393a9fe32773fb35c1868c12b5177dab9fb3fc103e53a5a", "cdcc5d38793e1874a006082bb43bc4d3d242827d94e1407e39afe62bb910437a", "ef84cc57f5b5ab0732dfc6106482bb4f6cefce89bc39dbef194759172f35b816", "fd9f1f1a0c7f1b22040488ce19bcb9b44624a5b08930808887be99e9074320e3"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "userinit"}]}, "reports_count": 17}, "Win.Ransomware.TeslaCrypt-9985404-0": {"bis": [{"bi": "antivirus-service-flagged-artifact", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0a2d2a5c3a17a93da80e275d5ffc83814084d17985c9191431eeae054f182f6c", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0a2d2a5c3a17a93da80e275d5ffc83814084d17985c9191431eeae054f182f6c", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "memory-execute-readwrite", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "artifact-flagged-obfuscation", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-opendns-malicious", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-fast-flux-domain", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-dns-category-parked-domain", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "deleted-submitted-file", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "network-dns-category-proxy", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "altered-sample-dns-flagged", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "registry-autorun-key-modified", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "modified-file-in-program-dir", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "network-dns-upload-file", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "modified-file-in-system-dir", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "TA0007"]}, {"bi": "cta-match", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "pe-imports-psapi-dll", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "excessive-file-modifications", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "malware-generic-ransomware-entropy", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "malware-generic-ransomware-backup-del", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "feed-domain-ransomware", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-deletion", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005"]}, {"bi": "wmic-shadowcopy-delete", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0002", "TA0040", "T1047", "T1490"]}, {"bi": "microsoft-block-rule-list-app-executed", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "malware-generic-ransomware-notes", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "recycler-file-creation", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-generic-ransomware", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "process-deletes-many-files", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "malware-ransomware-teslacrypt-31", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0040", "T1486"]}, {"bi": "artifact-multiple-extensions", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "T1036"]}, {"bi": "process-check-zone-identifier", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0007", "TA0005", "T1518", "T1553"]}, {"bi": "process-hollowing-detected", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "artifact-rss-feeds", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "html-page-not-found", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "html-malicious-page-not-found", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "process-check-browser-mail-client-files", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0007", "T1518"]}, {"bi": "dns-query-nxdomain", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "html-meta-tag-hiding", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0001", "T1189"]}, {"bi": "pe-uses-armadillo", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "0a2d2a5c3a17a93da80e275d5ffc83814084d17985c9191431eeae054f182f6c", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "mitre_attack_tags": ["TA0005", "TA0007", "T1027"]}, {"bi": "enumeration-browser-information", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119", "T1552", "T1539", "T1555"]}, {"bi": "process-read-ie-cookies", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83"], "mitre_attack_tags": ["TA0009", "T1005", "T1119"]}, {"bi": "startup-folder-modification", "hashes": ["6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "firefox-prefs-modified", "hashes": ["6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83"], "mitre_attack_tags": ["TA0009"]}, {"bi": "malware-generic-infostealer", "hashes": ["3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119", "T1552"]}, {"bi": "enumeration-email-program-information", "hashes": ["3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1087", "T1005", "T1119", "T1114", "T1552"]}, {"bi": "possible-privilege-escalation-detected", "hashes": ["3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83"], "mitre_attack_tags": ["TA0004", "T1068"]}, {"bi": "pe-header-subsystem", "hashes": ["0a2d2a5c3a17a93da80e275d5ffc83814084d17985c9191431eeae054f182f6c"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "nginx-webserver-detected", "hashes": ["0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa"], "mitre_attack_tags": []}, {"bi": "wmi-process-create", "hashes": ["679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc"], "mitre_attack_tags": ["TA0005", "TA0002", "T1047"]}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "TeslaCrypt is a well-known ransomware family that encrypts a user's files with strong encryption and demands Bitcoin in exchange for a file decryption service. A flaw in the encryption algorithm was discovered that allowed files to be decrypted without paying the ransomware, and eventually, the malware developers released the master key allowing all encrypted files to be recovered easily.", "hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0a2d2a5c3a17a93da80e275d5ffc83814084d17985c9191431eeae054f182f6c", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "946fea398370d7e2210fdbd5d58813f0512cd80e839215f64c2fbbb1caa0dc35", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a04b7e4375ce74e9d6c0cd1b2f719310f592ca256b001d350a9771a56feed2c5", "a5e52651ba69e54cd7866e45f43b2a5834b666d896c1b6ddc6942bdd4c1dcac9", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "a79f13924ff59c1728bed3bf5f0c17eef58f04cc23be84977887dbf599c41d85", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b436a18aa7ed593ae9a32dd72a79c7e60fd55e0fbfa0ed7aa3d61d8dbf428f98", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc84514e0f21a0bca8fc977b2d488cd82d823127f50559aa9c590c6806097d0a", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "c652b421a94d0d9c6ff25d94913a5cb83faa18b29942cc10b57a211f4ccfcc79", "db8a13298eda3b88a29974ede3d935733d960789bca404ac087af366cef00934", "de6a91d27c420826af284a8e7d12f9885fbe39eef4fab25ab6964eb0513ecaef", "e162afdc5c07d9d58b7ee45ac36d2c52e0fa6a4d87622c0718dbe497ffe51a0a", "e705123064539f3065fccf5266812dadfb1c436cdaee4c7d17476c7c9a8e21d7", "ee4101f1eeda587f4356fcd2eae19e768ff04a05571fb973d80c5b43d684df77", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89", "ff8e5733e71f9bccbb6869abee38fc266418050a28a9b7ce52dba828478afef5"], "iocs": {"domain": [{"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "host": "adrianadoms[.]com"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "host": "tocstartup[.]com"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "host": "drcordoba[.]com"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "host": "edge-institut[.]org"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "host": "www[.]informaticauno[.]net"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "host": "iheartshop[.]net"}], "file": [{"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mn.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mng.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mng2.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mr.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ms.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nb.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ne.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nl.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nn.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pa-in.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pl.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ps.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pt-br.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pt.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ro.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ru.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sa.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\si.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sk.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sl.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sq.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sr-spc.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sr-spl.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sv.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ta.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\th.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\tr.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\tt.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ug.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\uk.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\uz.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\va.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\vi.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\yo.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\zh-cn.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\Lang\\zh-tw.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\License.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\7-Zip\\readme.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\CodePointIM\\src.zip"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\FileChooserDemo\\README.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\FileChooserDemo\\src.zip"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\Metalworks\\README.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\Metalworks\\src.zip"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\Notepad\\README.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\Notepad\\src.zip"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\SampleTree\\README.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\SampleTree\\src.zip"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\TableExample\\README.txt"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\TableExample\\src.zip"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "path": "%ProgramFiles%\\Zulu\\zulu-8\\demo\\jfc\\TransparentRuler\\README.txt"}], "ip": [{"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "ip": "35[.]205[.]61[.]67"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "ip": "185[.]87[.]187[.]245"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "ip": "192[.]124[.]249[.]137"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "ip": "66[.]97[.]45[.]219"}], "mutex": [{"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "name": "345432-123rvr4"}], "registry": [{"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLinkedConnections"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "key": "<HKCU>\\SOFTWARE\\ZZZSYS", "value_name": null}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.CHECK.0", "value_name": "CheckSetting"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "key": "<HKCU>\\SOFTWARE\\ZZZSYS", "value_name": "ID"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "key": "<HKCU>\\Software\\<random, matching '[A-Z0-9]{14,16}'>", "value_name": null}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0", "04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a", "07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20", "0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96", "101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83", "1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239", "1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5", "213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a", "2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9", "3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa", "48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0", "5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42", "5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886", "5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09", "630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30", "6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e", "679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc", "7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b", "7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0", "85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a", "894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829", "948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d", "a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1", "aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566", "ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204", "b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f", "b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4", "bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed", "efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473", "f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61", "f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "key": "<HKCU>\\Software\\<random, matching '[A-Z0-9]{14,16}'>", "value_name": "data"}, {"hashes": ["04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829"], "key": "<HKCR>\\LOCAL SETTINGS\\SOFTWARE\\MICROSOFT\\WINDOWS\\SHELL", "value_name": "NodeSlots"}, {"hashes": ["04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829"], "key": "<HKCR>\\LOCAL SETTINGS\\SOFTWARE\\MICROSOFT\\WINDOWS\\SHELL", "value_name": "MRUListEx"}, {"hashes": ["04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829"], "key": "<HKCR>\\LOCAL SETTINGS\\SOFTWARE\\MICROSOFT\\WINDOWS\\SHELL\\\\1", "value_name": "MRUListEx"}, {"hashes": ["04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e", "8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829"], "key": "<HKCR>\\LOCAL SETTINGS\\SOFTWARE\\MICROSOFT\\WINDOWS\\SHELL\\\\1\\0", "value_name": "MRUListEx"}, {"hashes": ["a620821f3c5107bf898ea72eca6fba74806c429720ac8caf08e0f7260b6ef2a1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "nbmjtgb"}, {"hashes": ["07fd66fffac41c030a0a0385807a55047b7d9d5e9e64a68fcca7243c1a3bcf20"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "oobeuyf"}, {"hashes": ["213b9809092bf960014f911398f91aa267021c519beaa8fbdaa30366108ede1a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "udesqei"}, {"hashes": ["bc9c2d18d8f06fae64d8ab802842e6309fcc656c1b6caeed1206cb3f86f050ed"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "rnawquh"}, {"hashes": ["0b17c081060be4975e1fc41f929b27c30077b471da401aef273ebb96631f1e96"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "fqcmsew"}, {"hashes": ["055481780ed5cc639ebe08539dd04a5299a34c81abb7210868d306b799ec0e7a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "xpiqopn"}, {"hashes": ["948535bd87d71b27edc9969d244d6904b3c7a8ed046a2cc5ccaff23bf29e718d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "lvywdxv"}, {"hashes": ["aa64302ebd147c0d963ab8eec5ca93a37e51af11647aaae01accb4d969b69566"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "hbbrjsm"}, {"hashes": ["04c89b8a0f10c5e1568ed9097a0688ca60bde90ee967bb1c009897a7f3b4888e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "gucjfra"}, {"hashes": ["efbbd2b96250b7cd0c2dd7aa77ae1d8c6ce29391d7bbba3885842386f25b1473"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "hktrybh"}, {"hashes": ["5c8daa02bdc068920ebeae53ff4577eae39e39561b5db12e7e22eb5c081a7c42"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ltivtwk"}, {"hashes": ["00bf94b15560a365961a6ec0377125e1ef39d820d6dbfa378185707f6af35ae0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ohwpmay"}, {"hashes": ["5e144664268057d7d48d5c504c93eac270332519ecd0a223711c8746d0271a09"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "lsbbsfv"}, {"hashes": ["630998d841a8a9b0a2aa41f022ba72ff964345804746c3b2c6226ed585a1cc30"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "hxtgtpa"}, {"hashes": ["f9d265c3c5aab4ba4ebd85fa23c347a5225786f6bea4536bc5d291b3b6ca5b89"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "imlwdse"}, {"hashes": ["b583c1ae5422f32fbf6917f31fa8ac6ded12f21d53434f7cf587ab2bce1ac8a4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "yfkuiwp"}, {"hashes": ["ad445963d8334acdfe2fc762ab7bc3766693b0f73ffae253ffaee5129cd83204"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "wrpvprp"}, {"hashes": ["b4e271ba98e0bc6903b2a91ab2741f33b870e66a62bba8dab3137f9c9dc2571f"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "eyddtjv"}, {"hashes": ["f89d5c7eb3425f082549a6661d914b20533708a9f35be49e8aa39759cd00bd61"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ecfkahb"}, {"hashes": ["7b832ab4034e1302ef882ecd63eb70d00949152f26e5d0b9a04a2b68e3903f8b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "yjisieq"}, {"hashes": ["894b084d1fa4b0bfb553b02e7f8508fdec92fef5afa4fd30e35d030639bdb7d4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "kumouqq"}, {"hashes": ["8f28a171e69591ead7ad3db27bb980412a38e90e6d08604e3c5c37d3d7d30829"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "nmuscyj"}, {"hashes": ["7c9e78c548dce7c1ce6afb0ed6718dd63fc432760571114e4053cf13ecc011b0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "nyndvjp"}, {"hashes": ["5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8"], "key": "<HKCU>\\SOFTWARE\\99948A444AFA8", "value_name": null}, {"hashes": ["5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "usyisaq"}, {"hashes": ["5194232df8f17a495b057aa8da1a511ef0374ee0063643ad8d010fa7ba32e1f8"], "key": "<HKCU>\\SOFTWARE\\99948A444AFA8", "value_name": "data"}, {"hashes": ["3b26dfda2bb97b7ddc9494b5e29a275f86b29bcee0562d308f917b0df35a20fa"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "mbfjkxa"}, {"hashes": ["679ae8e833d4bf9ac267ae1ecb3ce875f633b2774004cff42b43eb6e4f3965bc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "jhxapgr"}, {"hashes": ["5e041d722d83b7fd3b1d1207a63fe7e53bf3d091f2b237f32810e12f97d9c886"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "mnxenfn"}, {"hashes": ["1c0c2a3695d71897ec5826bb038d8af10bc76450f908027252c2c347d78b6239"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "vejokhr"}, {"hashes": ["85a22270e90ad69392491b1f568e2c4a5ea7212f2e0c2f15b5acdef600a4216a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "nvpbfsh"}, {"hashes": ["48051abf99eb35dfcb13414e979c6d147b1bb8faf111eac943331b17fb6dffd0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "kxacyhj"}, {"hashes": ["2f4dfdf44d4454d0f6d3f77eec371d7feaf2a26c25a29e38d03e85cc8162fbd9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "tnfndoy"}, {"hashes": ["1d1101ee1aabf9c944567f3a8b749c95fa1e842b813b730d3153dc5bee5547b5"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "tqobeho"}, {"hashes": ["6789ad990b22c352423c289ba77bcb4e38a796b9d2d0aaf77b9371c0e1d3900e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "qeqtucl"}, {"hashes": ["101a48c59fa7b5ca1f9ac7b72b4684da9ae5a6fdcb4f36b55c1c886c0b873d83"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "farkvej"}]}, "reports_count": 35}, "Win.Trojan.Barys-9985440-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "pe-packed-upx", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "process-long-cmdline", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "feed-domain-banking", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "pe-uses-visual-basic", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "cmd-exe-file-execution", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "registry-modification-reg", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": []}, {"bi": "process-hollowing-detected", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "windows-firewall-modification", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-firewall-exceptions-enabled", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "shades-rat-detected", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "T1562", "T1112"]}, {"bi": "malware-dorkbot-cmd-detected", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-activesetup-key-modified", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "artifact-vm-detect", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "artifact-memory-vm-detect", "hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "This is a trojan and downloader that allows malicious actors to upload files to a victim's computer.", "hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "16ecf6fc7375b6f786cffd79b2d567d213f8df3e14e3b0f4b44f84d3ebb3dd71", "185783a2f4ea25fb28fa7223398ed1fee43fc5d7a132d63b4803b236492d7998", "1923c2edb48eaf747bde85e69dc6bdd9a876fb76e4ce00865ad1d3f3eb4f6aa2", "19450f072f26b878730c8431e9b582505a9dc9527ca63fabf78a3801bee49ffe", "198e3de748e2b2f0a3d6ce2b378bbf0e0016628689366e0e8e86004ae359d2eb", "1b2342647f9ec98c214c4553faa1696efea6f822cb3486d7c1f0dd87a699d585", "1f970f9b8fb6e9d7f257021936dc26030d7e82c59feaa7a138f92499f551f6b8", "207917275a9427ede8a356f6e79bd2e08727b2c0688c525829e30574b15a75f8", "208ab88cf1c40aeeea32732bf64dbac300e9eccbc04c8ef357c1d4bbcab123b5", "21374741aba05f09c320160c042bc1e095126f3b37b525d65aea33fa8c6b7b44", "218e1f59484a5a68318a11dde590d1d3c580590c91a2510ae761257f78c2ea15", "21a239d91e47f28452eeecefa915dcf93ad1b782c669f38951487ce3807483d5", "21fb6a3da2b69f416a632f5f99b67a908561b406a86b3fab09652f7a5694d81d", "2212286ebe3001501621119817a1053813d775a92f427e7e91a3fc876fa99855", "2216009ebe685e4104f6c7019aa246ee06941ffbff37ffb23282f5b09e969317", "2239c82c425735150668e8a7b89312b1f6b10e43dfbd851775758160fd595822", "24e9abbe8bac4b9b2141778833d28ae3e329fb5d097b409154b8b230dc0d74f0", "24f894ce0443841aef25b5d92820caeb761a6ae7af4ce918bcf0bace56396b75", "267c8f4c11ae2436e67dcfcccf5b697171b4e00bcea5612805c356a490d6405b", "2761b2cbeab86fe7078835de3552c5bf8151e94802e10f7c3ea5bff2e84eec67", "286eccf66ae03197ba7b8688465936fef81f042feada2c5bae8b2e92d7ad48af", "2905f5a9cf34a7278e42a5094e9befe1690012b7c7b4c57b6c862b009da2bbe5", "2a7e67a8833def5db79ee913524581e36e62c3e4379bc0193f23858d5e1e4607", "2a927225c07e85a9da03dc9591ef21d3f173475f872b2ec7a61fc11492492f86", "2ac8355f1693035b320c2311e893af809a4ab0c97d7294a47b0356877353c994", "2b6f8f29b4ad1d88f51620a7e609c0b696a6084a1f8cbc8164574446808e7ab8", "2dfcf133565b69615cdeec88ba4a1c9bcc2a13799fd55d2859bbd6ef1eb5e50f", "2e1257334010a14fd742306d94bbcaab85e8833ca0b0d46406746b7e71b72ed6", "2e58ba884074bfce0a67bcc398ace3f4ff6153620c50600777b7d05544ad1c99", "2ed134fcce7560bbccb93424109e76cf15d86ed26e52005e7719f07e180466af", "2ef800133e92b6af9757cbaae5d6088d1df3f5e6fa0ce4d471afe558918941fe", "2f937ae216922b5827754c1137270b216920e9ac95c245abb8c600135c1dc03f", "3023e30d13e1cb8f24777bafe29f8479be399ea6cf43ce5f316af4f9ddd23437", "30637b0b5a5e9240d94756c70db1b3cf98845287b473dd5a49b7b6af787758cc", "31323d03f3b5d376134d105f6b6815d913f67c7cce6eeb25383da057ee87c921", "313c1be4f5a36e60b650ee83d885471388f95190daf085829170632903d1578e", "32e7930b63d451da2e9fe586a1e6532edc88d39a651dd43b41cdb17828554225", "339eadeab1b90e5459719fb4b4023329984e7d69a98ef03933e147b47b408efc", "34392ea40bb63483634b5990ae772c09b79f83124224bec8975bced7c36e7d61", "346b537ef8c251d9bf2acb56a3070eadd8087e82162f35f88f52421f5c1276f5", "36637ea1dc4a3ec58f6c6b5f1c096099eb79d590b0d94fd8accc47299f507145", "3692a5c30853bb5f99789f0da8c96415dcce934a17d80137763e8d74848f7909", "37362d790f11155de0c21349c6b000076d54c495c4daf897195dd301add73383", "3777878d043603cf356b0e08e352bcbe2832cbea55cc4b0b6be3feda6eebf012", "37920e8437ed0d61e1cdb5776d8334ecfc8958dff46e6b4783807fa5e06961f2", "3811e4e2a2bf971f5a0c23fce37933a54a0e4fb28c0d3563e4c110802f7f1d68", "3893e0334fb0dcc3aaaf59ec40e3e5a1dc34297d8d3cb3ad7101166d9631688e", "39be5b655b9a26181731f068cccb9a9a480df542f6c713af8c768e342f8d121e", "3a3eab79e113457a84a7c26153912bf421c7233e9d33959e26210f0f3befa935", "3aa93b9c6f096bba92b39477fa1cfc7f115b7d707d6607468c53986b099d744e", "3ad49d60439c41342bfc67ee86567cef247a1f683b17bafc50d14a0eae6c0d0e", "3da4e92cdbca111f31e667f7b2b5cb7d5ba900fc9253da2838c66e2eb7b76265", "3da95d5c33369ac520910d42aa05c9ca7cf8731fd3a7f4422c35663579306cad", "3deda0bfde1fc3e1c4ccd0d0c56d52488221a66ad1b33fa779c9cb4ba25d8b2d", "3f46d3430a8a766c2b03ec6acfa98e0ef795852e0bd9d220f5b048c1a1bbce81", "411a1b7cb714ea2de7796a5af3980996f65afa2b2f9d391371a90ff61cd26f92", "4136d15890119347d371ef7a6dea4fb0b89de6af87d6ff2d88e834448246501c", "4149c7a2127fe629024ef5902be0c7a5a7368253ae69837382a1e87dc897ac6c", "41f2660e22b88a0541a8787ea5b7975b5ea3d4a8bfa9c0739486f4634bea30d4", "4276f320d592538fbd1124934bfbf08e9a5284c2240c09e9be4942a92f8f7356", "443772342a30a688058a6ba198bea9c835fa304a9a012d308791fcdcf1394729", "452cc275f6b67b26389d3b3b7c34004f936c4e35cf2f65311d6ac5ce19fd9fb8", "48af701bfd2afdd326ce6988e7ddd34b175d02ae83e5300383e2a6d585acb20d", "499a2fd70575c24bf81c5925ad35057dc4fadfdc920fdee3441b00825485ee35", "4ab05a9dc40c44e1e23367e95117e8b917e941fef153e87065e1ac4328dca74b", "4b8d12a63510f8b0aa5b66a0aa2b4c8d68d4cf97139597e577e5aa1b08c43172", "4d144baeddd23ee036347214cc771181b0e0b6921328c5121e384ea9e2d69799", "4ece9dea9f79009d501f30f9baa5a37193247a0cac3dfbf3006451944f3f6106", "4f02bd19b411a9b988a2d5ea3a179c91e4a3bfd016474dd21bf98dd0793c28eb", "4f4e3614ad73221d9a483f20a27553d12a148830f7bb8610ddb1a1e5783f7b3e", "4fb5facc5640dd47aaa611165c983d28b514d315ae21bff6469a0fada311391d", "4fffdc2076af6c3cfebb31be78a4cc2491bd4b43d16b4d7b0ebba3745eaba311", "50dfb900d02bba5a7f49c79fd4d0835ba6a49742505e30117536e452c3861c4f", "5288d510fc093ae364a0f376e3552592444fa4e496b013df933476a5747d4bfb", "52953ba790193335225c3124aeab4e49b488a47d4fd5c91817799082c3e2383a", "52c15ca1920b1c188c55aaf8492c07b08b472a84a988e89d978ebadd9d97ec1e", "535625b0005aab0a0ae9a08fa20178b57ca3f9a5806a5adb50349ee1d6f9d96b", "546fae0c73857c2b821475aefbea611d57d7bfbf0f473e7fe6b0232baa4fdc8b", "55f074b7e5ec5717bbdfafb2553372f2983035884d95e9c05e3ca75349b2ad49", "5630cc1cffa05fea6019f7a69d5b8edc1d82b9bce85f7c7e03605d7f916f459e", "5798e08d2eca6571639cba49ae5f65dc56682e94575b239223a3df659dfe6880", "58aae687184307fdff7696959515d77e5319c50c923d99f42693c5d0491eafb0", "594d3d68d24bf9af8cb3cebc2168f57b7106edad300bc6b4e6367ac23154207b", "59879392b1acf7e97ceb1638c145b88420f3cb493a67186f6635fc924aa25420", "5a1a97657a121ac021c520aa78378ce19399cdb8b07fed31981bad619e551b23", "5a4cffd79d2deebf7b8f4d656fc60f7c10a8de348c6a6b995399b4f39d13d552", "5cc99ad43cf4ae243747a0704f5ec11fd0b3653f7f1c856a30bc265a78e4c7b1", "5d3251b0ccc6ba112f0e776c58d66ed5af955082701b88497f92bb3f5349adea", "6241f1acb1cc608f64caaa690bae23e36e973c6f125893164561d6ce74f6190b", "633fab6019c4e8b8761048f0bc515838eace4864fa72f07978ef632c4a5587f1", "6363f78ce3b963d265685b264f5e44d2e33938fa4642b77579206f5212282b71", "63f4ea58a8523e82a9dc61579166655184f02ed6302e90b9fa6968f6c8ab2d87", "64802c4574f5f18be1db62d5aeb8b7c2a4ebba84110abd8e814d3a491c6573ea", "6557010ddf450565e83f62bbc027a9e07b9a9ddfa0cf2993c870cfbd7c5b8822", "65c3c3b0098f2d47fe5b6631fcf2407bebd65fc7760518f218ddc36dfd9e649f", "66b32ab18b62737bb073415d5744de0b139eb4e804f6997eedfff2aa045c5c85", "67236f9d039e4415f7d72a4fe875c77e56d8a4904d86f894b77ad1b4b3e3d7a6", "67ebdc6141b410bd765d930cf7ae5c619df531c9b627d999c858fdddda178979", "6908ae30b720ad37580f665812d194e9fe6357670b337e34fd798986b5917f2d", "6ae06723534ec16df4fb9dc1c104de0f20d3f56beda39a703042f641dd49db30", "6c95bea06bc8b7bf186e107e3df16598a2de5e7d4506b95f4d2108ac4e43a115", "6d0aea605cf2de7158124496217a7fe70a1064e2deb73f242b2d33c6a3b467fa", "6e1aba4c1bf3112367456ea45c10323e5658422b7169531fd5becde343af8b2d", "7018302007583c11ffce821072b64871b0544c6f4666fa0a768896436ae10d1d", "7018adf5bccb8ba9defda78d3c1a8b7bc30660c730dc2ecc76f60f0d57a7477d", "716d9db4ff6d2624c2d1e771700ef6fcd0904dc62f91a4649edac64efcb1ff83", "71b40a00db794fb3644942178fdd879b1c0db8bc220e3dce1da152abd392b49b", "77cdd0d66b27fcabf3b36a907b7e5de9174f521fe761c2ed55f641294ab916c7", "78643122e1f026913ef5414b88408041e00fbfce6cebc3ff2d9815f02ac95fc4", "78812ead46efaf7ae3b41d00a3205b5d466b9a27e26f0bdddc32fffdab916553", "7913dc09d4ff0ece829a1428d39f7d39b0b832f73d5687f46ac14f8349d2e468", "7a034c1b28bdea649f168b8d3d87213c4aeec523d528991633c78e32655b8f72", "7a0f01e4ecd9b4b2e252d95e8e61d8a1a7b060f2e19b3dfd09ceeb0a0269d9d3", "7b2c0342aed0f207760f311d995c5a6432e0043d77a029eb1fa7d604f5c61fc2", "7d4b865d8002b8beb95c87154498e18ebe3e6485b15c83c461d420124b76f1f7", "7d99407a346611b44f541145a3270aad192e0a5ffdd998cb13f7f98fe1acaf53", "7e007b63aacde7f015a578ac5a99bc070f7b6c2414101935694251d710a448ec", "7e824db2b4e7a6b8d54ed5f6c3983462d0662e3df2178081d4270a6d96c8bce5", "7e9bb62ced4544b8322ad5fca0bd9d4e3dc1de9ee64c64bc56e28f3fb5fce20c", "7f3fa10f5c2023a74ab518e21ba3c8600a898bb38c016db1f9c8a40bd5205813", "803ed6b3120870f621825dfe77e95622ef72a21caf8409b91bfc812d2e3e813c", "804de8de2ea9cf92bf351e85cd763270f325ca43f41e6353c4d6e6d7296a548b", "80616ab46be1ea34a1438c2744077ceb6915fe00d7c160f5311c4b7118562c3a", "813cf49ba94ad716da27b26cb8eba830857519b5868e437b59935c320edae2b7", "82ac94028ca6ed9048e0cbc56c4ffc90599b6e46d6f585466f63cc948be8c18b", "82fc21e75bd87b03bc1548ba2880d99dcf352e2d5df1f5fcd95f13b25dc5dede", "85e99096c724b898a0b341faccc27e069e7a52d318040fe8eeb9bb0e621d3c8c", "8675df463701bc3a22a46eb3c25e5baf6ac3b85182505f2e430999ded6d6df1b", "8877ea43a1205ac6abaffb31d976e67d356b4eff4c7c5fa7e45a3dbcb2732e82", "8df15a2709f20a2988613cd962c8b5e03bf3e2dc867a4a607080541c6581e7c2", "8e2a10d5c2a423d7565f3f7e36f35aa2e0f262b58e6d4f618563f703090539f8", "8fc7e2df54e5ea13c7b53da7a89d3abe5b80d67555f76de423d3e2140057b57e", "900ef5c403ff5818e861163a0590a11c8270b1b67cfc80ca2817cfe0e65f8f82", "901530378e7d4b7390a57a4d5a87b2d6f6f9c5bffb978ccc2e636d6d08a3c6bd", "902a4c8585e4d339e9393b530ed9ee3b3e1549a17d86b87d07701c5fc0c33704", "911658d99ab5f2b32163dc6c9725dabfdce4280b07933c289a577308bdf03c29", "9157ba368fada72b0bde6b54183edde177b78e7a1f238db8d2cce2853c58a182", "93b1396068ab984805a53df7981fdb0b849c43319207bcde378211f0bf516554", "945125d4f6e1bbd1eca84b0d25647f21e4a752278bff31b643028ab7a0afa550", "9487f7012fd14d5572bd86773ca380b09f8191753c25dcfae366a7d41a8d3c1c", "95d82cbf43550b51be239e8b3537653a2266496cfaf0389ba16c3d71f717391e", "9611f2e742d142d0a6ef6859374d87251187d016d35c4d34903a280d55f5703b", "9779237ec3ec675236612ed1b277dcaa00ecece1d6c4d5b414b2897f59938b7e", "97b80c1e51d886fc8edae5625ec059d02a6e28a2e472fdac3888368509e361ad", "982efb6136328a58885b95fbad760717f24a2e01cdb169d38a6c3e6e5f3ed81c", "999041a1975e7d41412586a38fcf74c024c33a8f6d4107841add20158b48df27", "99c446725a4392b1fa0d665c77e7ccecf3e8edf5d9f299ab4b292c80cce55d51", "99de25aec810a6a67d1dcd0e5519a0cc63671cb2da55b2b70f169464e3371721", "9a37196f33acec142d3cd80c14f9d5fcca6518711d90bbbc1f71c46e22283424", "9a92eb060bc0679067926e68504814cc5ed932a3ce3a0b046f7642c39b2ad80c", "9a9517f5fb84aa0b878ba50d676ba78ab39e6e128096e92f7f59526dc10a0b2c", "9b366efcc9048084ec0cdb4be1e77e45c8ff7d32553d625570f2a73501d507f9", "9b839e7e7215dd814c9023a3620569f360bc278a0646541a0a9820167a08f13a", "9b852bbbdf56ea44e4ba544ff6c58a3ac79d0a5d8b5836b723a79505d5cf2bda", "9c0c44a56d1854dd6116dce349635f7dc0395620eb8bc1b8047de3239a4fcc8c", "9cc0c2d3ddb298533c3024ed8bdec2a9295961c7f211afadd0e01de390283266", "9d1f845486ca27bd5a63ea47ec9db26f125b4eaa7c71b18db4f35bfb72fe8379", "9dab283892fea074ad9d3b02eaf12c7265c0e9251eb2b642db7a19734d391ae5", "9e0d5d1a4b023da0ded5e3eedf2f09fe8eecee33baa70e0cc3ac31981c649f29", "a03907ec8f3a2b28e2849230e920da6b0252672a3406f2b6f1e323ce81e9d328", "a11b045dadd35f2ec76527061a4fc4bdac4fa396729918e8f0b5ba1f75e75e63", "a16522b38cf0f3cc33a6ffc2ff7a4fe81cb0b02f6e03762d493b03da68abe2ff", "a390c5486f2d654351038ce84c265bf47f48c1f7a6e62982d33307d2ccdf9885", "a3e48c4654d351388ea0e60d241698a1fa1bbdf9908d908992bfef1264f13f97", "a3e93690b536e23f16f6b411e316e4b1e99e84a4d2e66d32602c31f32afc491f", "a4362797befe65b57a8390442ab53b4f53b76d5916901d6d8cb4f30ad9684c3e", "a4e987abe5ecec892b7b066d7ba2d5aa50724df8126fe1e08a48006f235bd09b", "a5f232eecef7b8374a5e6d00e363684450969016db828de56c6c979258b81c27", "a60968e8594bbb45830a6f95317f7d958fd3b7bb5612c7b32b56163fa085fb6f", "a7393ee0074f8eeeb9c3e82a18bc4f83e0658d0b2048572780c9de30d58c79b4", "a782cbcccc62b0cfb21f98da18b6c2da6b37be46daf20e41910d151e70b731dc", "a8312260e5f983f453f16f6dc27a359b3209bbdd2f0a5c132ccc25356e837105", "a974007e44be9d59f593293f87bbcece985d334e6b7ceeaa283c1b7d48290c20", "a9937ab42771a119973a00bc26f3437eed9ced78289533cb47c30a61c219d716", "aae7a737f4f9be1e388e78ff612b8b328b53dcdf6c8f9e7f7fbcae5e94edcf7b", "ac243c1989b4cb5cfa379dad73c54d533fbc3002001d4b0cace0b6d0fe9901d5", "aece54c8da1364a45d9a65f93e110d72cf3c29d7eb9630e8570c8f4004938d49", "af2dd789b4d348ff3491edc4ae4d838cfee3201a8c8dc131148fb80362765188", "b18f0e46f81b6a8fbdf4ca3536688136771336eb0a76c3365e7afda7d6c9304b", "b1f0fb404f247a6e7b7871d9e217a28b651244966c21b110bafa81ee07b59add", "b223454782954146dd609434d4a6e6684bedc3987a762e892288eb4cae272f77", "b3c4496c4504acce7e7fa511edab6255e316cd035ef736d5fa9853a569035c20", "b3edc685a602c548069970b5a8ad4d4a3709b6a38cc9f58bf41a18edee9c68a9", "b42f4264015009daaea0270c7796fd2123535dd235170295a65acdbba97972a7", "b4c7c13a4b037b8e693b81f011bdd378098de443acfe51fca75ac867cb25f55d", "b56a65b89ec1b117226705a3b8b0d589707aa685339fd523a3c7b4bd1ae3078b", "b6059589518f55dfadb960d04e8ceb543129f2bc7f9b311139812c3e7fa812c3", "b62ffe6ccf2e3ee35ae12fceb0b3c12561fadc370dcf225e8bb3a77b9ce64ffd", "b81d622a33728b9c7b3946190bd57fd479b7ca82ef73440313014f4076a66db6", "b862ff157581f0f6350f144f6c1529ea3807228b8251152aad367268e0e78fc1", "b9f30bbcecae7667596dae72c9c9bdd9ae69385d1dd03c57852f3bc501b92040", "badc6f032b82570f51b7455a7a620bd790f9a629df2c1ebd42770ba677454637", "bd5cde1c704b2bceaa38797d0c00dbc4c4a83f434366234949ccea44ea1afd1d", "bd76b4f6716faa4e45c632e4abb9f9d0a41245ed5450280bfbd8fdb3052509c7", "be137f024321a05b435aca92565b3094aea5b4bfce07d91fdbc5c4fcba3305a5", "be7552c6c4223d07df68cbdf8c6104ee6aee3ba5520ea900fbc8f945ee41d27a", "bf23d5bfbbd8f2a01e43fac43cf6df897779a53e7dcc5ccc8cfd67aec4ecc23e", "bf498d6d8d4ff99ba59d1901a331db2de8e379b4ed1ceea5e7427a9ae765e178", "bf4ecd91c8fd2a924813f6532a6882f94fbab22c270e4d35ddc0704f94f9f46c", "c1290361d9ca26fb229394228ee783d7646eb7427bae8cd9ff0416d6645fc5c3", "c4a2a4445104db6e1b4fda9fa200ac51203e521e4753f770c933153464810196", "c66a80cc848efd20d52b73b032898c27d3920c12ec9c7763fe0f01b9ca238d5e", "c6c5a607f95f32d6c59328c2b3c2c3e5dd518af1b537141df4e4a7e42077d3c6", "c6f2f0ac99d66fe784ae99260d46e285d9829d36c8246428b660231ed302e5a8", "c7b376702ec4a06b070717f8dc043538f8eea7a28ce7151643e5468f4126a2ae", "c8b640bce38d790b9793d8def09f4f52999fe183e3e52804bd508730232546de", "c91cb7cc38019f4a1475cd01e267e2181058bd27dd8c64b44578a58a3b22c33b", "c95451b6a9d0510096fb3f2f95c9e6bbc719502b90d88acc596320fae893aa75", "cc78eb74146a002d0400df4bc0b237a7ac78d7dfa94950134a27dda92458c434", "ce5025849b9948b22ba25b632243c32854871c30dcf3e179c8219739addc5fc1", "ceff52b863ecf8e2dff414161340544c98af9f11955b0f16c3e046e409bcabd8", "cf3f3945c6d6e48cdb6555803db2d40450904defc6e7eaed7fd2dd5dd6912636", "d099c958d9cd688c400a4c83c29526c14eda2b9b479e3f55a64864e009d6baa9", "d1ec38aa8160a94a45f106b9586f81bda04adf40db690ccdcdaa4e434a80d284", "d21f573150fc72bd05d74d08f68a0eb5b0a6526d0829f7699bba7a19669a035e", "d269d9e44e7bace7d601aa5b98cc0419340864f49ecc80e3c5e61a9217022592", "d398f4243b87aa46c76c2009d58a470902397b608a566a480973a85da183bfc5", "d4886adb5705f3a44098f7d1bafef8e62c17c321940eeacf215a2b17856db037", "d6df3907f610a946982a1a2b5ebc661ae97ee32427b1f12225b27836d43b879a", "d8ee175dcc9700173b625c61c04bce1027b0f0f4ebb41d7ee2dcb0d840f02df6", "d908782f5a93077b669c9f506dda30f4bcb228e47d5c977f641afb08621a4668", "da62e6fe5e189e3c5d357618336bb7f241ad0bbed23cecbafc586ddefefe77d6", "dae064aebbbf9a8b6c0b26950ec8f282fe7dd019e060be002402f41fa322875e", "db0c796edc7866be9d14b55191388ec338022cfa71ab7f068a518a4908ccf6d8", "dc844e357088a3f35fa34962500f1a559311cce54bb12bc7dc47af7a3e740157", "dd005330f0446a88e6a6e4097815cdbb94cbdfe8a6b9cbfdf75c132a5e39cb79", "ddb548623e5c1226f0ca13bc1d999e1a743086b20a743c3a910edd5d7f2228de", "ddd832a881220f7258be0fd759a082443692016f970f857d4678df6c333d9a01", "dde95a3ccf53e61708ce803a45bfc2df43b7ec74ab5a1772bf3f258eb240e4b1", "df0308176ad22b9b7c54739463e445b185d67a5631a675835a130c31d6f48ffb", "df70dd5dcd9bdd8197abaa8bb26e9d0ef4a06ac3d01fb3ae614cb573ba9dab9e", "dffcbfb95eb923a9523745dbaf5873d4a840d8ecb37b575e6a91181f47ab8c72", "e1174a97a90bd4b29a54fcf55d60d2c2f9df2ef50fbe90320b2a86d606e91d35", "e13277e0e99f675122acf656c81f302cc99573ac6ffb3b2a5fc2d9637ac405b9", "e2ed455852a22436a8e71a117d946abe763be1ac0955e0459f38e2fac1c3678d", "e31463d2690d7c57b01aec1db127bdbf56dd427674b04267098ac0b4b3452d07", "e35fff8e175d762bebad9a3eca450cb4ff5c22a0d3f09e0c8dbf4ae6661fa590", "e45c1afec3313c5eaf40ab28497005e416a468afbe0870c7741b7621b44bf134", "e47c9ed44c33ba635cc2e712b40ee1cceb3787206f326679756312b2e9dc28bd", "e547aa3225b87b6cf4c02e6724509781460b2b72acd123e272e8a9e5ae112a01", "e5b794dc91505bbe1580283ebff0e173f989ebb60ecdfa7400303636fdd20e00", "e5ce88f5d58df11b5bc8a7d7953b86353821618b93b596502bb26a9ce0334382", "e62c77b16c6086edac1e6d9675af58769f80ad0bcd52b90e1c76ace78b3df344", "e698b234b061d80701be73c132e1551cfdbc0a9c98482c53bd103a3bc48d123b", "e71f544464b197c4e99509336b24387a7e1966717429ed6b4e55fd0a5e20b4ab", "e8144c99366adaff663aac063962a9a84939f07124845ca392b401814a76747d", "e838e44389781855e6a2e1c40973082db321b67258173b466e2fb00f55a329b4", "eba54dba4908c23fb3369f66b23b16159c7a1662414a80d4d8fe9ea56327f7b7", "edf52d7717214564104db52049f1cd61370a1987f297a65a4476aaef78abc64d", "ee330ff07eada9e5612d4cbc932d6ade161b59d5dd6df22424eb17d82f9be21b", "eeea77e038170d2f04c4a4ecdf54b4965bcc10c109ee11c79629be9376dd17f5", "ef82d3395e6e03ae108fcd28f00eb306bed6e088eadf7a8c42a3cad1141209c8", "f0de55c6a3c6231b199d1d962e51e25e569959c12abf0dcbc80fb1af50b27ce1", "f1a6cb3894727efe25eee3182ce48b29087c84a0bb14aec37912e0b9f39b4dcf", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563", "f5037ef1cbf79eafd1951362bfd2feb0c252e68311df3c89715230b98f850d71", "f59881201aa5d8c18fc62b3b8f9badca7130b3273fb6b1e5e553e76b775860dd", "f59e65e553fcf72cfc320857653b6997500de7a1832594407ba3701fa1179ca3", "f65d6f5fe194aaf26e05c344f455d57e360558ea91a8eb809ec49cd3234cb1a1", "f764ebb4fd41c4982d654da4e7405c044777d37e65af7b8804c0430ff882d97c", "f78ff7ab4813f5c0dee8724f8a3f9fde9888c1d00a533a993a4d0a896acfdc70", "f7975fbd86db1f7e1f8ee1da5ca7e4c2872a72fd4ba422b31d60b65c86923408", "f7e97b3e8c5a50b49cc9612f2536ed6a83b2cd38a92704350f7f4ac2364c8edc", "f83b346bba6ddb362aeefc07732b8cfead702b2e614795c71c87de2eeed02acf", "f876ab11ea01aa32dd67de48c447be2192a5c78a3e95d824a1cd4bf167b918af", "f8db8b4752d18a077024518106abcc66cb3530f602e93637b5b1b47300366ca7", "f97c4f1ce24e86f9a8a1b07f6311015be9353d181f1b7c4a82602932e6b7fdf4", "fb314cdca3c22a016d7afbcc908b10c360947cf7eb4d5e57c9245e6bfcb790bd", "fba9cef3a9b6c4ce93a17d32f13114f27668ee348cdaa2d22854b469af485966", "fbc06caf1a9a1a7781bc218e6c83656ac8c16a656dd1d1a02da144c1497a56bc", "fc43f31246378f6cacc878ec7a6c141897b789093f1a7c97504db60b5ee3ab10", "fe93c5ee08792c7f565f57fcc89380eeb5418553f6f161e8a2b41a80364611b3", "feab34d9853a07958d24d37bd995519a0356921bddd5f30a277418873d4bc5b2", "ff1a7ffb1734c78cd2018503e0107ab656dae011bd2498a03f9cb71c88f82677", "ff457e0aef6edfba5da34989cc9af6a6ae15837d470600351a428f4bf3e7e665"], "iocs": {"domain": [{"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "host": "j8p[.]no-ip[.]info"}], "file": [{"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "path": "%APPDATA%\\Fresh"}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "path": "%APPDATA%\\Swat.exe"}, {"hashes": ["01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4"], "path": "%TEMP%\\pae96.tmp"}, {"hashes": ["0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6"], "path": "%TEMP%\\kae77.tmp"}], "ip": [{"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "ip": "212[.]117[.]48[.]248"}], "mutex": [{"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "name": "Q6UUSPIC65"}], "registry": [{"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "DoNotAllowExceptions"}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\INSTALL", "value_name": null}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS", "value_name": null}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": null}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\INSTALL\\DATE", "value_name": null}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{B4BFB70B-CBAC-86F8-BA7E-E98CC7EABA8D}", "value_name": null}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{B4BFB70B-CBAC-86F8-BA7E-E98CC7EABA8D}", "value_name": null}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{B4BFB70B-CBAC-86F8-BA7E-E98CC7EABA8D}", "value_name": "StubPath"}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{B4BFB70B-CBAC-86F8-BA7E-E98CC7EABA8D}", "value_name": "StubPath"}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\INSTALL\\DATE", "value_name": "Q6UUSPIC65"}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\Users\\Administrator\\AppData\\Roaming\\Swat.exe"}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\SRVID", "value_name": null}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\SRVID\\ID", "value_name": null}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4", "01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39", "033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278", "0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d", "04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290", "05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f", "088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162", "091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579", "094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5", "0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3", "0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6", "0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617", "0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d", "0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2", "0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd", "0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d", "1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be", "1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb", "12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa", "13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e", "1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd", "161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2", "1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24", "167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6", "f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\SRVID\\ID", "value_name": "Q6UUSPIC65"}, {"hashes": ["f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\f3d38ea5f9ba9c7334834c3b0f6ab0a062645d85d221b222d98a8f320d8b9563.exe"}, {"hashes": ["009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\009f1ec7c51398152db52064c3d271e601ccab8ddb33eaab6b6a6364b78dcdc4.exe"}, {"hashes": ["0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\0eca92089500a87412f8fe9400f9a7c1ae05c5e09d601f93d1e7c3b4c3d874dd.exe"}, {"hashes": ["0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\0b2c145f227de877c9b0539839951154f79ed4d15f4e681f74ae706cecab3db3.exe"}, {"hashes": ["13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\13b138bb4b71507d71d6c64d31a175e338048bdb830964d7998a000d1168f42e.exe"}, {"hashes": ["04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\04ee4488800161949dd91c5f80a82abd7bd2e71b35f2de743e65d45cb11ed290.exe"}, {"hashes": ["05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\05b0512d53800782344069835635ae3ac8a3bb9981f99b56193ee4315809289f.exe"}, {"hashes": ["01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\01092fd96e8f192acd2e2e5118dac67fae6157d218f9f9a915cd854953b41e39.exe"}, {"hashes": ["0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\0c997955d752296f77a7f1dc68eb01ccd63157342bedb3fd83e57bf97b9b301d.exe"}, {"hashes": ["1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\1646959c9a464bca27a352a0b4bb63e969ec342daad043c1413cadc854b00d24.exe"}, {"hashes": ["0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\0c00f6710d735133c5d6b953e89339d6e18db1ddda2993d95903523464e8ccf6.exe"}, {"hashes": ["088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\088628babd6844408d1b1b13a4e6ab56eb4de7bc069fa0b5dfd9ac6e5e7d6162.exe"}, {"hashes": ["0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\0c5916f4245ae5c739dab218a61b9da76fa500dffa4e216bdd007e906629c617.exe"}, {"hashes": ["1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\1511d9e223ad4f5a7f648c7343c1ec4462dd28f1fb9088d267caf72c4cf27cfd.exe"}, {"hashes": ["094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\094a11660b938acbea1a97d730be269deccb1a3ab1d7b3132e36f46556681fa5.exe"}, {"hashes": ["033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\033dca7f44bf455cb4682aa7e2905fc61d76e50879bc1abce8246756fb6d8278.exe"}, {"hashes": ["0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\0f5b160179e930e3f05059ffc40c959c7fa31e16372512ac4ebdd5afbce6d26d.exe"}, {"hashes": ["161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\161611e39a22e12bdbf452dc9b19ce0593eb53e97aaa2a2f92adc003273abeb2.exe"}, {"hashes": ["12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\12cca5ba5947e5967101896ac4e1904797b0895c2c02afee873995b8959ba8fa.exe"}, {"hashes": ["1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS", "value_name": "StubPath"}, {"hashes": ["1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS", "value_name": "StubPath"}, {"hashes": ["1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\1249a90af1e47efe5fcca5420f878994fe0e9e1032bf98fc3173d537058f0ecb.exe"}, {"hashes": ["091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\091a4051ad8b86b943f6ae73b8aed6ac96faea913e6157f10eea64de4b9e8579.exe"}, {"hashes": ["167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\167a8b41724b3a563c246197b8f6b0516843b22b3fb4daa38cc2a5e35858dee6.exe"}, {"hashes": ["16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\\\ID", "value_name": null}, {"hashes": ["16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa"], "key": "<HKCU>\\SOFTWARE\\VB AND VBA PROGRAM SETTINGS\\\\ID", "value_name": "Q6UUSPIC65"}, {"hashes": ["1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\1148ee059fe060f4ead316a2c17383f0748fbed5abef3520736d4dd628e4c7be.exe"}, {"hashes": ["16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\16378adaffb32b0426986538bd567a8871980c2fc373da8236831e29ae593bfa.exe"}, {"hashes": ["0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\0488259e35476b4b869285899b4342c6fbf1d3c6d091bc64d34df465c217307d.exe"}, {"hashes": ["0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE\\AUTHORIZEDAPPLICATIONS\\LIST", "value_name": "C:\\TEMP\\0d0ac40a0d28d339951bf22870115f9ee0c82ff12cf00a520c92d19c1b85eac2.exe"}]}, "reports_count": 26}, "Win.Virus.Expiro-9985780-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "potential-registry-persistence", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": ["TA0003"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": ["TA0005", "TA0007"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": []}, {"bi": "modified-file-in-system-dir", "hashes": ["b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be"], "mitre_attack_tags": []}], "category": "Virus", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Expiro is a known file infector and information-stealer that hinders analysis with anti-debugging and anti-analysis tricks.", "hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "iocs": {"domain": [], "file": [{"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "path": "%System32%\\alg.exe"}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "path": "%APPDATA%\\98b68e3c311dcc78.bin"}], "ip": [], "mutex": [{"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "name": "Global\\Multiarch.m0yv-98b68e3c311dcc78-inf"}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "name": "Global\\Multiarch.m0yv-98b68e3c311dcc78493cd690-b"}], "registry": [{"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPID\\{11AC3232-E7D7-49CD-ABFE-501700100B3A}", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPID\\INTELCPHECISVC.EXE", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION.1", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION.1\\CLSID", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION\\CLSID", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION\\CURVER", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}\\1.0", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}\\1.0\\FLAGS", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}\\1.0\\0", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}\\1.0\\0\\WIN32", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}\\1.0\\HELPDIR", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPID\\{11AC3232-E7D7-49CD-ABFE-501700100B3A}", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPID\\INTELCPHECISVC.EXE", "value_name": "AppID"}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPID\\{11AC3232-E7D7-49CD-ABFE-501700100B3A}", "value_name": "LocalService"}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPID\\{11AC3232-E7D7-49CD-ABFE-501700100B3A}", "value_name": "LaunchPermission"}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION.1", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION.1\\CLSID", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION\\CLSID", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTELCPHECISVC.CPHSSESSION\\CURVER", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}\\1.0", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}\\1.0\\FLAGS", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{66DBA565-0D3D-4D8A-9391-A2A4CF16DF40}\\1.0\\HELPDIR", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}\\PROGID", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}\\VERSIONINDEPENDENTPROGID", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}\\PROGRAMMABLE", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}\\LOCALSERVER32", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}\\TYPELIB", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\PROXYSTUBCLSID32", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\TYPELIB", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\PROXYSTUBCLSID32", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\TYPELIB", "value_name": null}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}\\PROGID", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}\\VERSIONINDEPENDENTPROGID", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}", "value_name": "AppID"}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "1f6531dfaa028bf787fe17e7d06db3215f62a640bd9c4c1569d4671c02c76c89", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{C41B1461-3F8C-4666-B512-6DF24DE566D1}\\TYPELIB", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\PROXYSTUBCLSID32", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\TYPELIB", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\TYPELIB", "value_name": "Version"}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\PROXYSTUBCLSID32", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\TYPELIB", "value_name": ""}, {"hashes": ["017914e50cb777cefee8c37387ee0ef0f2ed8d5e37f70631397cf970439f5d31", "043ad6bb1b9cdf89e6f755c305c4d1a63d434e224b970cd9ba2755b861acb555", "0998b37290085d19a2005b479e0d9984603670d15878655be31132c07f08e664", "2162f343de91915b86315191027723897abf71c71ebb8b83e658590ac833d745", "2a93031db9f3e0ae221bc0ddb74108ecbdb821998be33395e43ad6e7d3eb41a4", "31a7cbe8089e1c700c6f4849f94c4e68dda6f52985993e158f88b34ef49bc461", "53ea5ad87000b3b20426ecfc34177889ac6a657dbf634bce6a32d0d17e28f06f", "597ea95de28f6cff7f98e394c1fb24d73ae25f9c4e05991d5bd5dc790f58d869", "676adafbcf97181d8d01152359ec35c6987b4bb9afa85dfceb3adbc5e6518bb9", "7739b40252daa9775b0753af04fcc13c92fd67f542310cfdb3a91371cc684371", "8ddd46313fd45e956ffbdf06555b5cea30aae664cfae98fa564255c3e0da7147", "a149d4a4d73bf1e196473021b16b7ab91d406904bf0a3c6357990c9933a7ff03", "a207f03bb5c205d5711eaf6d0d39c327fbf0b07c4fc6de120528e935846cd7b6", "a54b5e9988c6527fa2e54da6e10807e9cddac1c0e468f4b60889f548c310e54b", "aaedf85fe5ec1c4246b46de9d2597ed7ec88a7fdf3e85232e7f6c005bec4947e", "ad4ae247194c47ecbae21d57dae9dba4f4292a57e833a0c6beefb211ea269501", "b2a794f77f82d865d0f5cb359f6664983dfeec7a5c86e3b098508af08440c75a", "c43dc105a3ecaca5a64f501bd997801db0c6f4f43a1def44840bea69fb0b1eb9", "d41d77480e12317e0016b8d72c1b7663b8005dd7a7e7aa7c4ec975bb4bee78be", "dc39b6d6feda5258836e59f7c68a8fd41315fe1975439358b3680812a066aab8", "e1f1f378121e8d6253bc727625f763931ed6ac1e559906d436309346ce815d2f", "e95a33ebb95c2bfdd1712f885437d5e4d739ffaa943c04c6d6f051a62c7619c1"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{A91E0BDD-79B0-42C5-A3A0-5BE434329577}\\TYPELIB", "value_name": "Version"}]}, "reports_count": 23}, "exprev": [], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2023-02-03T14:03:55+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Win.Ransomware.TeslaCrypt-9985404-0", "Win.Trojan.Barys-9985440-0", "Win.Dropper.XtremeRAT-9985707-0", "Win.Dropper.Remcos-9985482-0", "Win.Dropper.Formbook-9985599-0", "Win.Dropper.DarkComet-9985655-1", "Win.Packed.Shiz-9985661-0", "Win.Virus.Expiro-9985780-0", "Win.Dropper.TrickBot-9985782-0"]}