{"Win.Dropper.Bunitu-9997037-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "registry-autorun-key-modified", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "netsh-firewall-generic", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": ["TA0007", "TA0005", "T1016", "T1562"]}, {"bi": "netsh-firewall-add", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "malware-trojan-bunitu-mutex-detected", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": []}, {"bi": "malware-trojan-bunitu", "hashes": ["c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Bunitu is malware that establishes a persistent foothold on an infected machine and then turns it into a proxy for criminal VPN services.", "hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970", "f030d11e649bb479a7c03ab2058665cbed9cedea6596461e54beacd2f44d1434"], "iocs": {"domain": [], "file": [], "ip": [], "mutex": [{"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "3G1S91V5ZA5fB56W"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "8AZB70HDFK0WOZIZ"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "ATYNKAJP30Z9AQ"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "CBKZiOPASRHKL"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "China1839099"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "China4150039"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "D1JozWrldD"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "FMPsDSCV0l"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "Hk4kKLL0ZAF8a"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "I0N8129AZR1A"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "IwS01003993"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "JKLSXX1ZA1QRLER"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "KDOWEtRVAB"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "MLIXNJ9AEGPSE"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "MLIXNJAEGPSE"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "N800HANOI"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "NHO9AZB7HDK0WAZMM"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "NMOZAQcxzER"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "NNDRIOZ8933"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "OMXBJSJ3WA1ZIN"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "P79zA00FfF3"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "PCV5ATULCN"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "PJOQT7WD1SAOM"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "PSHZ73VLLOAFB"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "Tropic819331"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "VHO9AZB7HDK0WAZMM"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "VRK1AlIXBJDA5U3A"}, {"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "name": "sqlcasheddbm"}], "registry": [{"hashes": ["1e8c8dc9d8471c37b7d172e98836d43ca1cad640bea9710ad427831932383590", "29104433bc9580b8fb971b3b019b31c0429aee6050c94a90388e4c48f31fe0ed", "354a9603439b1fcba8799f009b3040d36e8072bf7e8d2e5376848ae18e7dcfdf", "385067c9b15cfbded1fd47997391091921cb96a398b7e47b874148cf0af699de", "39deff67e6c183bb569f45ad738c61eeb7a5d7aab3d850abd885e58537ee45a4", "4c885b7c936b126e4191c0e7264f65014c521946dccd3315f938cd1dca8ca831", "5362e35f563cfb85f38d7bf6bfaf04810772124ef4d56f74fd9a554cc276c204", "55648717057380c395778366acd4a98efc6a594f733ac18124b2a61e781a4bf1", "56968c3025f683ca81913291deb3cacf3ff523a61d2fec4527c703b3b00a9ce0", "58ba452d597c415e579f225bc1428a8f0c99d445c7ef78e484a4366cf822759a", "726156ada6455930904ffffa4c38757c9e9cc0095916da2d40446cb4b21eba1b", "7ab47a878fd2d3898ae3fe38dd84bd3959ecd258b84e604d0be70d723a49e03a", "7c65efbf7293ebf6d60def451efe602b2dfb7690b8bbc379816e501ad9dd46f8", "8456aaf9e6697b7be7941999be838c4ec383ffd6d5978052eedb82141c443a74", "978fd92bbcaa778f752019816338069efb20192e475cb5a83c7518c91033ade0", "ab2e6ef15f736f1e035f88720ab374804d55506943f4cf6032c375466121d534", "b537e19ff297db2a78c3685d311af30ace164b8a8cc2cf947d7b6e02e3ffd452", "c67c529a843613d911b51eb8624a5f04218386a6260b3afcaba2a8024aa88e72", "c87e212e2c8f571dd88c669e2a2a5943d9dbc239445d306a0aef59d73e190bd1", "c9595ba7c81fa90a74e3d5fa081d7489b55765f79a3c3ab19ba84005c69b220c", "cbd820f37217290b31053e53ca39472959dc8d871795b78a5fd6d55ac9eb3c21", "d07f119b7549e5766cd9e3e3adae00100320d79422e715c178bd6d67b7f67f3d", "d2276dbeb2db82ec2a7331e046a28b99bd350b2a1c81079e660c5fe06597e32c", "e071fcc9aa94dce40c99f86f6683246c12783b0d4194cf0e1adbbe0ad7a5f19e", "e8bb3349d54cfc58fe72d7c995ba631bd65ff4134ecc266a92bfedad57441970"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "wotrwl"}]}, "reports_count": 25}, "Win.Dropper.DarkKomet-9998118-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "hook-installed", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "malware-known-trojan-av", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "network-http-blank-user-agent", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "pe-uses-dot-net", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "http-response-redirect", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "url-not-found", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0005", "TA0007"]}, {"bi": "pe-imports-psapi-dll", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "artifact-memory-vm-detect", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "process-hollowing-detected", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "pe-certificate", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "artifact-windows-component-suspicious-creation", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0005", "TA0002", "T1036", "T1569"]}, {"bi": "registry-autorun-key-temp-dir", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "malware-darkcomet-detected", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-registry-detected", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-mutex-detected", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "url-dropbox-service", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "created-executable-sample-appdata", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "network-dns-category-file-storage", "hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "mitre_attack_tags": []}, {"bi": "dns-dynamic-domain", "hashes": ["889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f"], "mitre_attack_tags": ["TA0011", "T1568"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "DarkKomet is a freeware remote access trojan released by an independent software developer. It provides the expected functionalities of a trojan, such as keylogging, webcam access, microphone access, remote desktop, URL download and program execution.", "hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "iocs": {"domain": [{"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "host": "dl[.]dropbox[.]com"}, {"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "host": "zoukiny[.]no-ip[.]biz"}], "file": [{"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "path": "%APPDATA%\\dclogs"}, {"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "path": "%TEMP%\\tmp<random, matching [A-F0-9]{1,4}>.tmp"}, {"hashes": ["099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82"], "path": "%TEMP%\\tmpBD03.tmp.exe"}, {"hashes": ["099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82"], "path": "%TEMP%\\temp_GujQurApmI"}, {"hashes": ["099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82"], "path": "%TEMP%\\temp_GujQurApmI\\svchost.exe"}, {"hashes": ["88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce"], "path": "%TEMP%\\temp_AoPXtxyscR"}, {"hashes": ["88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce"], "path": "%TEMP%\\temp_AoPXtxyscR\\svchost.exe"}, {"hashes": ["88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce"], "path": "%TEMP%\\tmpC06C.tmp.exe"}, {"hashes": ["66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7"], "path": "%TEMP%\\temp_MhOpOytNAS\\svchost.exe"}, {"hashes": ["66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7"], "path": "%TEMP%\\tmpBF9C.tmp.exe"}, {"hashes": ["1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e"], "path": "%TEMP%\\temp_dgFaHSHFIP\\svchost.exe"}, {"hashes": ["1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e"], "path": "%TEMP%\\tmpBAF0.tmp.exe"}, {"hashes": ["2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e"], "path": "%TEMP%\\temp_XbxDBxrtQM\\svchost.exe"}, {"hashes": ["0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7"], "path": "%TEMP%\\temp_hYMuQAMQTy\\svchost.exe"}, {"hashes": ["0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7"], "path": "%TEMP%\\tmpBF44.tmp.exe"}, {"hashes": ["8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2"], "path": "%TEMP%\\temp_AChkJWUFGO\\svchost.exe"}, {"hashes": ["8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2"], "path": "%TEMP%\\tmpC28E.tmp.exe"}, {"hashes": ["781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614"], "path": "%TEMP%\\temp_ktuFuZaySw\\svchost.exe"}, {"hashes": ["781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614"], "path": "%TEMP%\\tmpCC7D.tmp.exe"}, {"hashes": ["8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5"], "path": "%TEMP%\\temp_jTWgKpaNic\\svchost.exe"}, {"hashes": ["8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5"], "path": "%TEMP%\\tmpC453.tmp.exe"}, {"hashes": ["a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e"], "path": "%TEMP%\\temp_gwLGQvZjwn\\svchost.exe"}, {"hashes": ["a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e"], "path": "%TEMP%\\tmpFFFB.tmp.exe"}, {"hashes": ["2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924"], "path": "%TEMP%\\temp_gFRVVtvPLv\\svchost.exe"}, {"hashes": ["2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924"], "path": "%TEMP%\\tmpC0BA.tmp.exe"}, {"hashes": ["889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f"], "path": "%TEMP%\\temp_OGUCrFZSxe\\svchost.exe"}, {"hashes": ["889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f"], "path": "%TEMP%\\tmpC108.tmp.exe"}, {"hashes": ["276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7"], "path": "%TEMP%\\temp_xavIfYrzll\\svchost.exe"}, {"hashes": ["276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7"], "path": "%TEMP%\\tmpBFC1.tmp.exe"}, {"hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822"], "path": "%TEMP%\\temp_cVzuZNiwAR\\svchost.exe"}, {"hashes": ["786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822"], "path": "%TEMP%\\tmpC4B0.tmp.exe"}, {"hashes": ["506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec"], "path": "%TEMP%\\temp_AatGEvGNBZ\\svchost.exe"}, {"hashes": ["506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec"], "path": "%TEMP%\\tmpC118.tmp.exe"}, {"hashes": ["37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5"], "path": "%TEMP%\\temp_HJgJeZTmhe\\svchost.exe"}, {"hashes": ["37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5"], "path": "%TEMP%\\tmpC01E.tmp.exe"}, {"hashes": ["b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "path": "%TEMP%\\temp_IHIFjieKvi"}, {"hashes": ["b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "path": "%TEMP%\\temp_IHIFjieKvi\\svchost.exe"}, {"hashes": ["b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482"], "path": "%TEMP%\\tmpD12E.tmp.exe"}, {"hashes": ["ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "path": "%TEMP%\\temp_bsvLCGWPyC"}, {"hashes": ["ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "path": "%TEMP%\\temp_bsvLCGWPyC\\svchost.exe"}, {"hashes": ["ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "path": "%TEMP%\\tmpBFA2.tmp.exe"}, {"hashes": ["b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb"], "path": "%TEMP%\\temp_BKqGbEEpZP"}, {"hashes": ["b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb"], "path": "%TEMP%\\temp_BKqGbEEpZP\\svchost.exe"}, {"hashes": ["b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb"], "path": "%TEMP%\\tmpBBBB.tmp.exe"}, {"hashes": ["d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81"], "path": "%TEMP%\\temp_TpnYFuDGAL"}, {"hashes": ["d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81"], "path": "%TEMP%\\temp_TpnYFuDGAL\\svchost.exe"}, {"hashes": ["d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81"], "path": "%TEMP%\\tmpE116.tmp.exe"}, {"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9"], "path": "%TEMP%\\temp_klFMhXFGSr"}, {"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9"], "path": "%TEMP%\\temp_klFMhXFGSr\\svchost.exe"}, {"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9"], "path": "%TEMP%\\tmpC434.tmp.exe"}], "ip": [{"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "ip": "162[.]125[.]4[.]15"}], "mutex": [{"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "name": "DC_MUTEX-13F3AYC"}], "registry": [{"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "key": "<HKCU>\\SOFTWARE\\DC3_FEXEC", "value_name": null}, {"hashes": ["0405c695532cdfadb49cd6e5dc0175e2740a6b34df032e0d6370ac57781bc0b9", "099393350020fa9d643c1fd02dd8e0c8e2c9090ff5d4ff96a807b03cc927dae6", "0b9d53d8392c6af28951737704765fb1a7c75a849633ef4e4a1d7b7be861f6d7", "1ba1034f63585a98afac1b985f866ec53e66ba500c8a7e499521e47e66e7867e", "276e6b279f8cf83b531fcee7fe2f770f1814b5d63ba25aa407bf1676698d09c7", "2d67a134e9a81d3f55017c4c3e395e90194d6ad6cf2d24b6f567f9df0729f55e", "2ed27da0b1a0cf9949aba612b54427c7d104e1fe44c98e363b3cef43289d7924", "37c13c62990a05a6105024b075eb672723a0838eadec043618b4222ca15520b5", "3fe6cb53ea8f0a35f828fc1e87ad9cf6a27081695ef9b709fb3367c2e8c21e82", "506a3537c3afbb25783fe817f230595b3c7369eaf737ee84475a6ed1d5c5c5ec", "66d64aad782b2ba9baf1fa04c5738d55bd23754dba179b7c01fe15837ee6b6b7", "781529034cef2a9316fb18187611f911d2d6463f56636e7d6393045a88302614", "786be271e7f3f8249203417bd8547b42e3dceb9440e228d844a78c85f2dc7822", "8534b61a4f0c0dc39da45ddf6a874edfbaf0ea9ab36c58f470ae3e062f81c6b2", "88789c72981be3e3f57b31771ab73ad52089f65a8b5f0544d3ae5ed9e8b14f6e", "889b3fe85d94c61276540ea86de2de983c7d7357eaf394717e0705cd365a307f", "8f12b7340c8cc0c6c7c3c3f6ed64a3f8850fa035d1f811dc4255b128ab00d4c5", "a7b80aea4110f98e399e64abb923dee60f70650041593358297542c33f6b8a8e", "b83385710b54918cdb2814e555c0b6189a2c5ba46bc2cb0a435b5b8f5a5b51cb", "b837289b0f42bdfbe726dfafbae51a0b5cb5af21a3a2859bedaea7ab770d2482", "ca67b7e760c2d09004928da6736f4784cc05899ea7ae4bf19deb16d4fee047ce", "d24f72779958896980e074e15cc9abb88daa041c13123525db3d6ee33be32b81", "ffe2607eec8bda28fc38b19bbef00cfcd572f3335b3773c4df758526243f128b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "kb2456.exe"}]}, "reports_count": 23}, "Win.Dropper.Ryuk-9998099-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714"], "mitre_attack_tags": ["TA0005", "TA0007"]}, {"bi": "registry-service-autostart-disabled", "hashes": ["6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714"], "mitre_attack_tags": ["TA0005", "TA0040", "TA0003", "TA0004", "T1112", "T1574", "T1489"]}, {"bi": "pe-imports-toolhelp", "hashes": ["6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "auto-update-disabled", "hashes": ["6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-disable-windefender", "hashes": ["6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Ryuk is ransomware known for targeting large organizations and asking for rather large ransom payments to recover the encrypted files. The infection has been associated with emails that contain malicious attachments that first deliver Emotet, which is used to deliver modular payloads such as Ryuk. Ryuk encrypts a user's files using AES-256 + RSA2048 encryption algorithms.", "hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "iocs": {"domain": [], "file": [], "ip": [], "mutex": [], "registry": [{"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER", "value_name": "DisableAntiSpyware"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINDEFEND", "value_name": "Start"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE\\AU", "value_name": null}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE\\AU", "value_name": "NoAutoRebootWithLoggedOnUsers"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WUAUSERV", "value_name": "Start"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE\\AU", "value_name": "NoAutoUpdate"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER\\REAL-TIME PROTECTION", "value_name": "DisableBehaviorMonitoring"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER\\REAL-TIME PROTECTION", "value_name": "DisableOnAccessProtection"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER\\REAL-TIME PROTECTION", "value_name": "DisableScanOnRealtimeEnable"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER\\REAL-TIME PROTECTION", "value_name": "DisableIOAVProtection"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER", "value_name": null}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER\\REAL-TIME PROTECTION", "value_name": null}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE", "value_name": null}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS DEFENDER\\FEATURES", "value_name": null}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS DEFENDER\\FEATURES", "value_name": "TamperProtection"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER\\REAL-TIME PROTECTION", "value_name": "DisableRealtimeMonitoring"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER SECURITY CENTER", "value_name": null}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE\\AU", "value_name": "AUOptions"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE\\AU", "value_name": "AutoInstallMinorUpdates"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER SECURITY CENTER\\NOTIFICATIONS", "value_name": null}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS DEFENDER SECURITY CENTER\\NOTIFICATIONS", "value_name": "DisableNotifications"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE\\AU", "value_name": "UseWUServer"}, {"hashes": ["0390005afca1f2f7e33031e4ac953e14e95e55b94afd52da3d850e90de51c354", "091d997ff229e66719e5bcf97b8980319e05e60b0394c2a34bc85dccbc581459", "092d82556a175015901e6c6de282c229a6c640b8894a1f1a8a18c9f0a89ed508", "0bd516c3539b63861cfbd4f1e426fb3e730decbb6bcff277985dd089b54115a9", "0de1f935dc67fd7fc2e2fa0ad1b0ef00eca8c2a2dc98b490fff780966ad2ff51", "0fc309bf0975249ee326fa02ff42af98905a75196dd05b8c4a5486824595c444", "104ff588961235ac1821fb19ec37b97b1f10152df6bacc6eaee753cffd728ac3", "106e693d6e17ba6794229b51eac9fbb0427d519c78222f60ff0299b756f00329", "11dc839bd58d033a064eb141a13d652362e82eabef0de5b346356892465050f9", "146f2fe3666461792937352ae4b6c0aae08739303b51012590dccd414223854c", "196815e0f72628a844d96180ba5ea4078f5b22ed50f5dda26760ddfc46e911f2", "1a1a9b0dd57527293d6339aba16a6ac361dc5dab82ae998a749879371dc846a0", "1cf11cac6db3b0900035a9b2a7d64fa7d28f50c28df011d837f65f464ca21f11", "1d418d41da0aedc492f4ecf9d2afa04843383631dcaae8e817cc29f0517e2e34", "1e56a709b410822bf642d5588a152714463b59e4de02fc6b6cc7097d27d91557", "21291524362d2c79137220e8ec83453c32e618279c91e496807f43cab9c1383a", "22d7dec928486dc68cfc61616d0290627a2cd2e846baa2789e1b03fdcfd4feb4", "27b9acd79e80b32188b74d64a95937043fecb0ea14144fff52482d5a0012d8fc", "2c585895513e08080cd201355e54d464ab2349134ea7e7e54aaac48db482039f", "2ccd2456e9621155cbafb6dc9ab85123a7ceced9ae99d109caa9d706bde4e473", "2ce74fcaa5b3c915b3f96ba9105072fc79ccddb10e60bfaf7a00237877ce2c59", "2d6f0a6f0f06a35a6dc7015b67a0315ad7ed3492ed9d551dd334272ad8fb5c1e", "2d79b9ab8d8d5c0f1453990725f42c0f145330fe9d6e3427ae9d8cb027f27411", "333d5cae1bb6acaf590715c02495e8b05eee6c7ebe792c4ba2f340e2c5bf57bb", "36c33413bf489c22e8fa4829de29d70c7c26fd947a480e3f537fef92f303f4d2", "390020fcfe06c3a882d64a8949b6f51529759347a55f7437bf0649e88c040a40", "3cfc7c4c1efd3eaf86ba3bf37fead9ef8d067566dafd6edb5d0c407c52831b1d", "3dee4235122a10219beb345f195eab6a96bbad3f1ef1e9535b90b5f50e8eaead", "3eea444dbcd0fc92702dd09d154b015b0eb948492fce243e5438f5b45649eedd", "3f855ff9dadc2bfcdc36710aed15b338a18d85c058782860096ec792f9c6e891", "40fea68f9642273e176d68143add520768c5dc76c980389faa5e7e04d7cb350b", "427fe2e2c74e573acb1966214207ec3220ac3c5cc361dda83ea1115b657efcff", "45493b0f3017e43b474b0cb61adfdec0b69df0c0e26b9663658b6d03fced81d2", "469e1a42f74b4628f58b5d48378f8ba0213100872f2f7c64d9eb75e8b20991b2", "4e4c1146244038e536f328424dc027d498f00d2d87d426d02f8ce89681d1bf5e", "4f9a43864fafe316e38c51716ad262fab116b24056d351c1e0da571f76fc4e2c", "52f5df1e42267ead3a4ec2aabf3dfca23a8603f102721d5e6d37bb9008d810c5", "5371d5a4256273c7ea272212592d61407957315db210eee371e6f03138ac2b97", "551a2f8015517b6e652b07e66d0974cd2abb2205f0b4e73fe7e3821a47f1def4", "567b9ec1303c80901b521a3e0916db2ef853d61040666e515784459724ba72c6", "5736a2c8169d4431e8ad354a3716dd0af38ee7351213bedf800d4e0b053fcc89", "57bda1c4da96055898e4be919eb9be3570441bfc56ffe664bc869b754aea7427", "57fcc6aaf6d46a73bcee00a20de9ec547887cbbdb2c6fbeb50969ef092fcba35", "5ff3d94683ba7274a53562a7fd37c0cc49c693afb66c7e12fdd5d86cb259ed9f", "608bb20bb322ac61d79dbc4b497696a0ff4c3efa21bed9b8711ae2c7c782b40f", "6745c66fd4710c0760566c6b7a5ecba800964970802af026cab6e96040b884af", "6a63a4bee20fc246298ea81fb255f99347f34f47565b9b5d21d636ef67d5246f", "6b15693b4fb643cb84e3cc480822a8efc72f115a207535236215929eefe7b210", "6b89975c589b400f09530a2e482c181b331684379f1b2a9200ab5bc2dc4919fc", "74ae93dd2160b3c3d5645c7c718ca1d60e87cfc1951e824b258571cdb9cf022f", "787b04e3726c5a87915fce96865030e02245cb9f04908586fa01189e219badc8", "78b50699fb9ef5934755e7064868fdbc4494458b50858912b0f2f71e2840bfc7", "7aebbbde2b6fbd17153c600a016ce9b2606a57c08e618676c932d5295a33b6b6", "7d68a4b2f82bf5d309a765b5ce353c5d333a92a9716b8531688ed7540803f653", "7df7e3e51b9803eaba5e7e8d0c27bd65f9afd7e99a3d2468d7a33fd9389431fa", "7e807dc7617e8496f78628ac408221064ff0df9ca11caabdd1a886123622c48c", "808a0ef80a58b53fd99d200e8fe406c9363dcdb6c279e8af492de2827c601533", "8183b6dde7dd4624044108e7305f3c87855bf0d275ccb22639e4074421262ad6", "86221d6dc2dfcf665e872c45d5283fa90837b0480c7217a3fdd3dfdb8482e836", "878761098bad171319d360d15049d63429964687ec8abd1227706c9125dd52b1", "8a4ad86287591e6cd5c2efe984b6b1bd63bde582b9f8e765f34505c23232ad74", "8aa9ee7fa539dbca1fc2f24ec372b1611463a75fe38fc94335d00ceaf25048a3", "8c5909f6cab68fd97029a18bceea4aeec8225bc4137ecf14dafc89ef568b22a6", "8e2f5231e982b934b6bc5aa1827eea51b56ea9a8711bdf6586afa7c5d26c4eb8", "8edede028699564b34cb0ffe72c5103bbbe2663d56e887c518d582fdecd605b6", "95ea9f0a2519da3775170b8b1c18327d86e132f7df5ef1d0a90a78324ac74799", "967a4ae94e30c93a8135dc6e5a4724ca2a0876d86859edd39bb9daaac5f494c1", "96b96b5cfa20dca21c5a772cf7a01e9f0aef38abd928bf0c54327d25311d8340", "97041c39baa4ed28bc036f8b789d6cff8795771130df535304153b13723d2798", "98ffbe2ea3be2f1ae7238a30a6e475b3edb68b3c2bc0dc0606da7afe13afba51", "9a3a60033529f6045a2ed6df2cc3c3a3a727b643ead61ac6adf8b0370e54afe9", "9c2db275d55a05f66769cc018eaf0c550b909dc0687d52af83f1c9852e179e8c", "9c8a36b783988f750d2d182e7482f1115f7a2d3e23bb3d1ddbe9cf313cdc7b65", "9e543438f1fabe7b20d49a82debf12f515b40c247930b8af72fadd097fa27f2b", "9efd38d064e7066377b9ef1865afb88c5f2f1328b9850daf409b4db5babe384a", "9f4e5d6a9e16d676f8d204fa5950375c205f43ac067e4dda3d7ea26e231dc714", "a78bbd12721c97ca0eb42101a14132a318e7498a16394ccfebd37dd971aecf63", "a93b06cbc4caf431db70449ca034a45b27863e377f41474169b046af7953c58c", "aa3d8fd469d931555a62bac2d9f7bc2ae7f317586e1a3c1dfc053bfe0c4b40a1", "ad127818d77fbc649a04a71c143f888bbbfb519ee9f919954c72c9d848d3121f", "af29b3a4131248a03c505da32241b1c48f900cc096165775b1c7e9cc5f93b1c9", "af61366e15b979c84fccecf8d83ee5a78f35fa133632dd71fe34dfa011929600", "b32934b4162310b38c01a34b049ccba647952d8b3a197306d1f8385b5bf989c1", "b33cf8caca7dbb75273b9e988957ad58c35fcbbc7fa5f631e2ea1768746a224c", "b53eb2c08c20f26d7446439afc3011fb3f2196ef296157250990f4d6b8fcc545", "baba8bedb469de1bd4fe6e54f759cf9f49d05ba2fa507a7087be8bd60e1ce2e3", "bb12dd964a7bbdd396d65a49468e9de03bd80b878d81105c41c1ce3fc90e2bf0", "bcc09eda66a8547a5c4d5ba63eec927dea8c63b61f933c6e6f024575fc352f0b", "bdf61215e577c34f626ea4f056ef9b370b6a7445aab785f86b796a37a115f3ae", "bf78b6155b033935d3b07730a4bd7269735451485910b724e84a6949d52bd67c", "c4943176880980507dbd08cc45a81e3b9ff24526a63c255e6e4b0cd66407dc4f", "c616f17e0ea4fc1075e0475eb5ab5ca1ade40eb32c8fddf85d4bdf4dbf8f9f02", "c83593636d10f8b11726e0d447e2de3e489b2936358c208bb02a5606a6926f39", "c8b8ff973a683fc30ef22f6e3b015bcc24e03cd6e1f467aa67491689129c7668", "cc2335038dde6f50933c260bddffe9882d50667264acc7d4094f1470f07af623", "cde048a456ca2fc1eb5c894322ada0a79881da5f16c15c56ce38cd479da7f85e", "cf635da7f75ec64e47a847f066aaff8e60db3a54f4626e76186c63fb1a1e7573", "cfac989978be44b3cd697cd8be1230dd5c54a02c1efc7529725c6e94df0257f1", "d99f75833a5c145aae3eec0e6da0b9e84400404a64e7eaca9d468090b1ac51d9", "db0ae4a7d8f9acd9ca719e76442588bc735723ce7919fdf54878b55b05a375a6", "dca3643a54859a3bc2a848fea1f5fc7f67ff847516edb6058b5317e4ca017122", "de4bf2d59584d59d9da4929a6e0893107f2c1097e8db5b02e417acce77b983e8", "dfb99ea6c390afc0de0f82f1dc7093c3ff5ac6b5845f0fd2643f4d3fa0cc8ee9", "e39fed2487ba2f266794c72bacdbe7ec6243e0ee3ddaa39443a6f24bcaf4a04b", "e533f69d9c749b9f4ea34ebc97035d19df8b7d0f91bbd1163d8dfde4b1ce8701", "e6241b5a0638ba639957cb34ec76cc9b4faff801689cb4a5d9349f5c9e4b624d", "ebff5f0d7a0709e7db19673ae06d70e24e92399fe896e3081ba0a00dba31e737", "ed7821d183f271b835dafef52cc93ac5baa39ef994a95de0a77c9b0aeef7e45a", "f03bb760d78be45eb054b0a2d1d1b04b48054d949c7c08e21cd15f4f68e40b6b", "f234fefec612f6fda2061e0d9b91cbe641c66dc2bacecd1ee5408383b66fbff6", "f36aa2d004ef6a171542ef2dbab7a3611fa45711befe8d5fd3026eb2efb1c8ff", "f54f83d2737c89efa38c3059666a8517a68fba0452a3023bcb4b6f25d3274297", "f85b6dc8c64a030b75dd4ebaa782a753554826174deeb2412e5c02ef45380e4e"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE", "value_name": "DoNotConnectToWindowsUpdateInternetLocations"}]}, "reports_count": 113}, "Win.Dropper.Shiz-9997181-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "nginx-webserver-detected", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "dns-excessive-domain-queries", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "excessive-dns-query-nxdomain", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-dns-category-parked-domain", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "registry-autorun-key-modified-nt", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "network-dns-category-cnc", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0011"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "pe-imports-toolhelp", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "pe-dos-header-paragraphs", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "registry-winlogon-key-value-modified-to-userinit", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "malware-shiz-mutex-detected", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-points-to-temp", "hashes": ["7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Shiz is a remote access trojan that allows an attacker to access an infected machine in order to harvest sensitive information. It is commonly spread via droppers or by visiting a malicious site.", "hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "iocs": {"domain": [{"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "qekafuqafit[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "ryhyruqeliz[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "kejepujajeg[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "tufibiqunit[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "lygumujycen[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "xudoxijiwef[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "pupoliqotul[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "citahikodab[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "direfiwahur[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "vowypikelaf[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "foqurowyxul[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "nomimokubab[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "ganovowuqur[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "mavaxokitad[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "rylupalyxad[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "jecekorosuk[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "lykiwaryvuk[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "qexeholagav[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "tujomalumav[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "vopudetezuq[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "rycodypycym[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "cilicofahev[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "vojajofyced[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "dikolobeliw[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "fogefobunik[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "gadurabotiw[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "nofypafiqev[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "jepobanagij[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "masimafoded[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "ryqehegubes[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "qetoxagekec[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "keralanyxiq[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "lymyfenumij[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "xubirenosiq[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "tunupegirec[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "puvomegagep[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "cicavemejih[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "dixexehyzex[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "fokyhyhumap[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "volekymyvum[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "nojudymiwuh[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "gahipyhopax[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "lyrugujiqat[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "magowymafum[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "jefamyjejat[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "kepyxujycaz[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "qedevuqelug[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "rytukuqunun[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "xuqotujodaz[.]eu"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "host": "tuwiduqotug[.]eu"}], "file": [{"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "path": "%TEMP%\\<random, matching [A-F0-9]{1,4}>.tmp"}], "ip": [{"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "ip": "85[.]94[.]194[.]169"}, {"hashes": ["032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "ip": "13[.]107[.]21[.]200"}], "mutex": [{"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "name": "Global\\674972E3a"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "name": "Global\\MicrosoftSysenterGate7"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "name": "internal_wutex_0x000004b4"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "name": "internal_wutex_0x0000043c"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "name": "internal_wutex_0x000004dc"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "name": "internal_wutex_0x<random, matching [0-9a-f]{8}>"}], "registry": [{"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT", "value_name": "67497551a"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "98b68e3c"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "userinit"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "System"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS", "value_name": "load"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS", "value_name": "run"}, {"hashes": ["0315c6bad516fdbca0ec18505aab2fd489f8cae3b1a88480324024e8c0d4dc94", "032ce1ee56f2fbf5edd3598b81b0a8d2b0d763c6be2b2c45b605216ed48ff7b2", "4d65ee2c89ec77eb0154380541883d8f0b0ffb7ed963421757650eccdca3f903", "54f74995c8ac50adf9e4d6914943c5dee2450012505cac20f3f9b2ffd8848c91", "7d7a3f2f220e48278e1996c2b8c1df759c5fbc5c420709b16ce352c9a5d5ce65", "7efb62037a6458aded75c10bd1b48dc6c93efed5e9311ff778f5ab3332f476d3", "849d628ae1ff1e2be87ff7b9a7d5c0561d3a4108b89fecd6450c6080a0621a69", "86a5d335eabd578d0eabb186e910e9909e4b0e1875c56d8f7ebc879d8f8f36a5", "a8b8e9d1707759a6d198a2936d0a70f2ee39cd885c5277825981032dc11d8997", "b1057720ef4c01ad319f0ee782790b2a4cea3ffc1abb5e7a7bc2062d734150c5", "b2dc0b7dbe88b8e45abc085b9c5ae9779b2ce1de6ddc8ae38377f4c878bd7c78", "b68fee6ee5495b079fe6dc4347290937c9754728f489cdab49cd5fd417177d24", "ce3a9e9d184c355a9157a234e9a4ee1c4891d0f93bfb1c9b3455ebf3acf2fb7c", "cec3dcaa3e9eeec33f29aaa4d3a949ffe34c5e9e688cd997ef344d554ca40de7", "dae231c71c6fa7ee7eb4adcf91a194167e04c6a2ec2534925021e22e70c4a2f7"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "userinit"}]}, "reports_count": 15}, "Win.Dropper.Tofsee-9998087-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["669dd95b76e6c32a2ffbb11b4ff767168c6b553f08b04a61e03ad5aef1099cd4", "6301cce6e78b8011004d1068928196b9d49e642b58942f980cb2e55a2daef08b", "a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "c38b39dfada9a664e0adea4030de3e4f4c2b289902cddf7549b2f1737a7eb9ae", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "3a689a258a19a24f4299bd7822b18bedb4d92c7ead8aee33f4bee2471658a7a9", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "16e52c8523bcb28eb990690cc2f1d44873ece0424a0e6a311ef5120d7dae0bd7", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "8a1f7f831260dfbd1262710452167503867274f7b59593ac569dd8b96eeef725", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e", "94c1d8052e1f14ebaa26ae41e2b1567ef86e98b126a06c290dd5086f22d50160", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["669dd95b76e6c32a2ffbb11b4ff767168c6b553f08b04a61e03ad5aef1099cd4", "6301cce6e78b8011004d1068928196b9d49e642b58942f980cb2e55a2daef08b", "a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "c38b39dfada9a664e0adea4030de3e4f4c2b289902cddf7549b2f1737a7eb9ae", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "3a689a258a19a24f4299bd7822b18bedb4d92c7ead8aee33f4bee2471658a7a9", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "16e52c8523bcb28eb990690cc2f1d44873ece0424a0e6a311ef5120d7dae0bd7", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "8a1f7f831260dfbd1262710452167503867274f7b59593ac569dd8b96eeef725", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e", "94c1d8052e1f14ebaa26ae41e2b1567ef86e98b126a06c290dd5086f22d50160", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["669dd95b76e6c32a2ffbb11b4ff767168c6b553f08b04a61e03ad5aef1099cd4", "6301cce6e78b8011004d1068928196b9d49e642b58942f980cb2e55a2daef08b", "a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "c38b39dfada9a664e0adea4030de3e4f4c2b289902cddf7549b2f1737a7eb9ae", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "3a689a258a19a24f4299bd7822b18bedb4d92c7ead8aee33f4bee2471658a7a9", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "16e52c8523bcb28eb990690cc2f1d44873ece0424a0e6a311ef5120d7dae0bd7", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "8a1f7f831260dfbd1262710452167503867274f7b59593ac569dd8b96eeef725", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e", "94c1d8052e1f14ebaa26ae41e2b1567ef86e98b126a06c290dd5086f22d50160", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38"], "mitre_attack_tags": ["TA0005", "TA0007"]}, {"bi": "pe-imports-toolhelp", "hashes": ["669dd95b76e6c32a2ffbb11b4ff767168c6b553f08b04a61e03ad5aef1099cd4", "6301cce6e78b8011004d1068928196b9d49e642b58942f980cb2e55a2daef08b", "a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "c38b39dfada9a664e0adea4030de3e4f4c2b289902cddf7549b2f1737a7eb9ae", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "3a689a258a19a24f4299bd7822b18bedb4d92c7ead8aee33f4bee2471658a7a9", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "16e52c8523bcb28eb990690cc2f1d44873ece0424a0e6a311ef5120d7dae0bd7", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "8a1f7f831260dfbd1262710452167503867274f7b59593ac569dd8b96eeef725", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e", "94c1d8052e1f14ebaa26ae41e2b1567ef86e98b126a06c290dd5086f22d50160", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "modified-file-in-user-dir", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["669dd95b76e6c32a2ffbb11b4ff767168c6b553f08b04a61e03ad5aef1099cd4", "6301cce6e78b8011004d1068928196b9d49e642b58942f980cb2e55a2daef08b", "a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "c38b39dfada9a664e0adea4030de3e4f4c2b289902cddf7549b2f1737a7eb9ae", "3a689a258a19a24f4299bd7822b18bedb4d92c7ead8aee33f4bee2471658a7a9", "16e52c8523bcb28eb990690cc2f1d44873ece0424a0e6a311ef5120d7dae0bd7", "8a1f7f831260dfbd1262710452167503867274f7b59593ac569dd8b96eeef725", "94c1d8052e1f14ebaa26ae41e2b1567ef86e98b126a06c290dd5086f22d50160"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["669dd95b76e6c32a2ffbb11b4ff767168c6b553f08b04a61e03ad5aef1099cd4", "6301cce6e78b8011004d1068928196b9d49e642b58942f980cb2e55a2daef08b", "a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "c38b39dfada9a664e0adea4030de3e4f4c2b289902cddf7549b2f1737a7eb9ae", "3a689a258a19a24f4299bd7822b18bedb4d92c7ead8aee33f4bee2471658a7a9", "16e52c8523bcb28eb990690cc2f1d44873ece0424a0e6a311ef5120d7dae0bd7", "8a1f7f831260dfbd1262710452167503867274f7b59593ac569dd8b96eeef725", "94c1d8052e1f14ebaa26ae41e2b1567ef86e98b126a06c290dd5086f22d50160"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "process-hollowing-detected", "hashes": ["669dd95b76e6c32a2ffbb11b4ff767168c6b553f08b04a61e03ad5aef1099cd4", "6301cce6e78b8011004d1068928196b9d49e642b58942f980cb2e55a2daef08b", "a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "c38b39dfada9a664e0adea4030de3e4f4c2b289902cddf7549b2f1737a7eb9ae", "3a689a258a19a24f4299bd7822b18bedb4d92c7ead8aee33f4bee2471658a7a9", "16e52c8523bcb28eb990690cc2f1d44873ece0424a0e6a311ef5120d7dae0bd7", "8a1f7f831260dfbd1262710452167503867274f7b59593ac569dd8b96eeef725", "94c1d8052e1f14ebaa26ae41e2b1567ef86e98b126a06c290dd5086f22d50160"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "network-communications-http-post", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-http-blank-user-agent", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "nginx-webserver-detected", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "process-long-cmdline", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-http-numeric-ip", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-communications-http-get", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-downloaded-executable", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-snort-file-exe", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "network-file-downloaded-to-disk", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "artifact-windows-task", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "windows-util-schtask", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "windows-util-schtask-generic", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "potential-registry-persistence", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0003"]}, {"bi": "pe-tls-callback", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "task-pointed-to-appdata-directory", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "registry-user-shell-folder-modified", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "html-page-not-found", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": []}, {"bi": "created-executable-sample-appdata", "hashes": ["efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "high-heuristic-score", "hashes": ["56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Tofsee is multi-purpose malware that features multiple modules to carry out various activities such as sending spam messages, conducting click fraud, mining cryptocurrency and more. Infected systems become part of the Tofsee spam botnet and send large volumes of spam messages to infect additional systems and increase the size of the botnet under the operator's control.", "hashes": ["16e52c8523bcb28eb990690cc2f1d44873ece0424a0e6a311ef5120d7dae0bd7", "29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e", "3a689a258a19a24f4299bd7822b18bedb4d92c7ead8aee33f4bee2471658a7a9", "3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "6301cce6e78b8011004d1068928196b9d49e642b58942f980cb2e55a2daef08b", "669dd95b76e6c32a2ffbb11b4ff767168c6b553f08b04a61e03ad5aef1099cd4", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "8a1f7f831260dfbd1262710452167503867274f7b59593ac569dd8b96eeef725", "94c1d8052e1f14ebaa26ae41e2b1567ef86e98b126a06c290dd5086f22d50160", "a3faa51328023afdf40456a901c58a4e977c2337341c6ff0b7dd0bbbaca578de", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "c38b39dfada9a664e0adea4030de3e4f4c2b289902cddf7549b2f1737a7eb9ae", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6", "f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32"], "iocs": {"domain": [{"hashes": ["29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c"], "host": "jeffmorales[.]top"}], "file": [{"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "path": "%APPDATA%\\006700e5a2ab05"}, {"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "path": "%APPDATA%\\006700e5a2ab05\\clip64.dll"}, {"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "path": "%APPDATA%\\006700e5a2ab05\\cred64.dll"}, {"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "path": "%System32%\\Tasks\\oneetx.exe"}, {"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "path": "%TEMP%\\cb7ae701b3"}, {"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "path": "%TEMP%\\cb7ae701b3\\oneetx.exe"}], "ip": [{"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "ip": "193[.]201[.]9[.]240"}, {"hashes": ["29dc138ff8b2d1300e7fb8c9d48a49b5635ef4eba48fed6fe96ccaea4633860e", "56d914e4c6976ee5d5f74f94f05dea55601fc330dd1e38c2111357283323708c"], "ip": "176[.]124[.]192[.]33"}], "mutex": [{"hashes": ["3c65de52ad093abbb73aae163e3c239069799b0a802418e169de9017dca5ac38", "56411c5e607385b436a305d2676486db9a832e6981c352938a7bafb538d67725", "5b49c4564077cbcf7d35179eb46b0bee981fc9777c170f6691849d216024f7f9", "5bca3d8d72005f97db62233c7330cd85656e2f63479f2dbf25b7655030f057a9", "703c5b3add9ec20996eb89d8abdfa5f48fb19fa5f04a2847fb1a6dde5e6e0b7a", "8107254004ae76a6fcdc0255c5d72fde37d81280f3c08faab3f584823bd8e1eb", "c81d4186d8d7a69c5635b0d3eee3b165c35e56921f0de5bcbec8725b7892d55d", "e406e7f6be7cf008d1952ae1a8882f9e3adca5974dd6d57049c5f8b508958498", "f3431d4b0fad8c5e39dd887362217cbaaf7abfa3db413013350ac0378ceebe32"], "name": "Global\\<random guid>"}, {"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "name": "006700e5a2ab05704bbb0c589b88924d"}], "registry": [{"hashes": ["8127bc9f82467eca7c5d2360ebd6d4e275d341a1a254da42e088e78b24ad2655", "ad50da96cb67488a5aa59c830e0f70df5621e698b52737367bd70e6107ea6283", "efccc1f4d10fc8260295ab2593396cdd1ddaf3a90254d94107e4fe8c90c6f2c6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\USER SHELL FOLDERS", "value_name": "Startup"}]}, "reports_count": 22}, "Win.Dropper.Zeus-9997235-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "871dfa1ef60d5752755abee6091e67ceaa397ac3accab8a637c16a0bca9e1dc7", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "6041834d9b3ced19bfc7bd2ed783082c3dafb0f19e4b67541efa0a01c7cfe6a0", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce", "fc805d6dc870722b1db4c706aa369fdea4c19fc0fa58543e06d4bfe2342aeb1f", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "a9692a8a8cf4be472bb45df0265ced1f9f30b23bfbbb9a523df1e64576dbb4e5", "421c7692476fd1a7bac73115b1c081c56b20be1bb191d3e228f40bc888de06c8", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "dae2db72eb2064f7aec14bf503b279d9a7850804f4f2ee6878c97cd1f6a8f282", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "22f805038c3cf048156fdb1232bb8cee4bd46ab32af79d733bba311fc4b61e94", "6053302c79b74edbccb9750dea999b799be5e7c409c95bf12322ac83f1608974", "d03856840b3826ff1dd9add0d5cce68285c9135ea573ed935c3e622968695be3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "871dfa1ef60d5752755abee6091e67ceaa397ac3accab8a637c16a0bca9e1dc7", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "6041834d9b3ced19bfc7bd2ed783082c3dafb0f19e4b67541efa0a01c7cfe6a0", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce", "fc805d6dc870722b1db4c706aa369fdea4c19fc0fa58543e06d4bfe2342aeb1f", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "a9692a8a8cf4be472bb45df0265ced1f9f30b23bfbbb9a523df1e64576dbb4e5", "421c7692476fd1a7bac73115b1c081c56b20be1bb191d3e228f40bc888de06c8", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "dae2db72eb2064f7aec14bf503b279d9a7850804f4f2ee6878c97cd1f6a8f282", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "22f805038c3cf048156fdb1232bb8cee4bd46ab32af79d733bba311fc4b61e94", "6053302c79b74edbccb9750dea999b799be5e7c409c95bf12322ac83f1608974", "d03856840b3826ff1dd9add0d5cce68285c9135ea573ed935c3e622968695be3"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "871dfa1ef60d5752755abee6091e67ceaa397ac3accab8a637c16a0bca9e1dc7", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "6041834d9b3ced19bfc7bd2ed783082c3dafb0f19e4b67541efa0a01c7cfe6a0", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce", "fc805d6dc870722b1db4c706aa369fdea4c19fc0fa58543e06d4bfe2342aeb1f", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "a9692a8a8cf4be472bb45df0265ced1f9f30b23bfbbb9a523df1e64576dbb4e5", "421c7692476fd1a7bac73115b1c081c56b20be1bb191d3e228f40bc888de06c8", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "dae2db72eb2064f7aec14bf503b279d9a7850804f4f2ee6878c97cd1f6a8f282", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "22f805038c3cf048156fdb1232bb8cee4bd46ab32af79d733bba311fc4b61e94", "6053302c79b74edbccb9750dea999b799be5e7c409c95bf12322ac83f1608974", "d03856840b3826ff1dd9add0d5cce68285c9135ea573ed935c3e622968695be3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-unalign-hdr", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "871dfa1ef60d5752755abee6091e67ceaa397ac3accab8a637c16a0bca9e1dc7", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "6041834d9b3ced19bfc7bd2ed783082c3dafb0f19e4b67541efa0a01c7cfe6a0", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce", "fc805d6dc870722b1db4c706aa369fdea4c19fc0fa58543e06d4bfe2342aeb1f", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "a9692a8a8cf4be472bb45df0265ced1f9f30b23bfbbb9a523df1e64576dbb4e5", "421c7692476fd1a7bac73115b1c081c56b20be1bb191d3e228f40bc888de06c8", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "dae2db72eb2064f7aec14bf503b279d9a7850804f4f2ee6878c97cd1f6a8f282", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "22f805038c3cf048156fdb1232bb8cee4bd46ab32af79d733bba311fc4b61e94", "6053302c79b74edbccb9750dea999b799be5e7c409c95bf12322ac83f1608974", "d03856840b3826ff1dd9add0d5cce68285c9135ea573ed935c3e622968695be3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "871dfa1ef60d5752755abee6091e67ceaa397ac3accab8a637c16a0bca9e1dc7", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "6041834d9b3ced19bfc7bd2ed783082c3dafb0f19e4b67541efa0a01c7cfe6a0", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce", "fc805d6dc870722b1db4c706aa369fdea4c19fc0fa58543e06d4bfe2342aeb1f", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "a9692a8a8cf4be472bb45df0265ced1f9f30b23bfbbb9a523df1e64576dbb4e5", "421c7692476fd1a7bac73115b1c081c56b20be1bb191d3e228f40bc888de06c8", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "22f805038c3cf048156fdb1232bb8cee4bd46ab32af79d733bba311fc4b61e94", "6053302c79b74edbccb9750dea999b799be5e7c409c95bf12322ac83f1608974", "d03856840b3826ff1dd9add0d5cce68285c9135ea573ed935c3e622968695be3"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "pe-resource-lang-russian", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "871dfa1ef60d5752755abee6091e67ceaa397ac3accab8a637c16a0bca9e1dc7", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "6041834d9b3ced19bfc7bd2ed783082c3dafb0f19e4b67541efa0a01c7cfe6a0", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce", "fc805d6dc870722b1db4c706aa369fdea4c19fc0fa58543e06d4bfe2342aeb1f", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "a9692a8a8cf4be472bb45df0265ced1f9f30b23bfbbb9a523df1e64576dbb4e5", "421c7692476fd1a7bac73115b1c081c56b20be1bb191d3e228f40bc888de06c8", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "22f805038c3cf048156fdb1232bb8cee4bd46ab32af79d733bba311fc4b61e94", "6053302c79b74edbccb9750dea999b799be5e7c409c95bf12322ac83f1608974", "d03856840b3826ff1dd9add0d5cce68285c9135ea573ed935c3e622968695be3"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "dns-excessive-domain-queries", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "excessive-dns-query-nxdomain", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "feed-domain-banking", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "deleted-submitted-file", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0005"]}, {"bi": "listening-port-opened", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "altered-sample-dns-flagged", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "registry-autorun-key-modified", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "files-deleted-used-batch", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0005"]}, {"bi": "cmd-exe-file-execution", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "http-response-redirect", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "unsigned-roaming-execution", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0005"]}, {"bi": "network-dns-category-cnc", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0011"]}, {"bi": "pe-imports-toolhelp", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "sample-pe-modified-on-disk", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "possible-dga-communication", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0011", "T1568"]}, {"bi": "malware-zeus-mutex-detected", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "sample-modified-deleted", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": ["TA0005"]}, {"bi": "html-small-file-redirect", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-obfuscation", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "html-unicode-obfuscation", "hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1"], "mitre_attack_tags": ["TA0001", "T1189"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Zeus is a trojan that steals information such as banking credentials using methods such as key-logging and form-grabbing.", "hashes": ["22f805038c3cf048156fdb1232bb8cee4bd46ab32af79d733bba311fc4b61e94", "250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce", "323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "421c7692476fd1a7bac73115b1c081c56b20be1bb191d3e228f40bc888de06c8", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "6041834d9b3ced19bfc7bd2ed783082c3dafb0f19e4b67541efa0a01c7cfe6a0", "6053302c79b74edbccb9750dea999b799be5e7c409c95bf12322ac83f1608974", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "871dfa1ef60d5752755abee6091e67ceaa397ac3accab8a637c16a0bca9e1dc7", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "a9692a8a8cf4be472bb45df0265ced1f9f30b23bfbbb9a523df1e64576dbb4e5", "d03856840b3826ff1dd9add0d5cce68285c9135ea573ed935c3e622968695be3", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e", "dae2db72eb2064f7aec14bf503b279d9a7850804f4f2ee6878c97cd1f6a8f282", "fc805d6dc870722b1db4c706aa369fdea4c19fc0fa58543e06d4bfe2342aeb1f"], "iocs": {"domain": [{"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "host": "www[.]google[.]com"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2"], "host": "www[.]bing[.]com"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "augqwshaypbydxjnhacugqqgbumvf[.]ru"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "lreurwknkfwcmfwgscpkzcmdefypcy[.]com"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "twonmtauydnwxbmzkbsgxktjf[.]info"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "eqojlqstdeaionpvaigqdmypsvsyt[.]org"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "cqfyyvzamxgmhamfxobetxnr[.]biz"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "yirkqgytovhonwydeqsoqst[.]com"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "lnsouqsusztaofgeukxjffyh[.]ru"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "uowomfpnbipvolovjvsdmfqhsg[.]com"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "dmcmxtdmfqfqbeijzhnvjffylmz[.]net"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "rcvwscythudbipnpnobvokzfebinrmf[.]biz"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "iblmbdabelugdajziguxxw[.]info"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "mjfedmhfutpztdhaqlxmvxwmz[.]com"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "dtgrwuscefqzpvhubonbgyg[.]ru"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "lnssgkjlxwdulhicyqgushe[.]com"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "hizmnqcgqgeykrlrcauaemblib[.]biz"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "tdskkbweageifhpwthiemeqt[.]org"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "diwtoymnmyxsxrgaqkdal[.]net"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "host": "fydetkrvwxgibmxytugpbbetd[.]com"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "host": "cetoxhsphljhuayrkvpbdy[.]biz"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "host": "xmbgykaidyhunvvvxodyy[.]com"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "host": "qkcmfelbnzlganjmfzhirouw[.]ru"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "host": "xwugqrgvxnfwcjrsvcbuxseifp[.]com"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "host": "ifillfjraywgsgscmscknplp[.]net"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "host": "ulvhwgobucyknkvutsdtsbih[.]biz"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "host": "zztvgtgtwfmprqhmnjhdto[.]com"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "xdtusztdezdeidcqprwcuxjr[.]com"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "host": "lampjscamrdttlrclnj[.]biz"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "host": "wgeqvoojpgyhqkvqkgufmzxijyxf[.]org"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "host": "bigrvkgykzovofpfuifqsaymndu[.]net"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "host": "yhpzjayizouglyptljnjv[.]com"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "host": "fabqzlljnxhmjbqsoojeiwcjgyvs[.]ru"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "host": "rcyltktojvtdmwgpaqprmfkfmr[.]biz"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "capvdxxmbtteidqugddidq[.]ru"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "edeeyaqkzugwkmbfmveudhmtgof[.]biz"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "hwkpdelnfqsgukvfytcrcetvwh[.]info"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "dercojqgdkjrsucfmbgjzcm[.]org"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "jffqbixohfejxwkzrotkzvwfijnl[.]net"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "fazusibgmpvukyhtxslaeylxsudq[.]com"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "hscqkdozmbobpzlscfamfylxweage[.]ru"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "xknrcmfcmemkcqlgivoojceheb[.]com"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "ldiudqyxbyjbjzhxwdzpvgkn[.]net"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "yxxkwxspljfxombpnbiukhiifzt[.]org"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "iojfmyhsxcvwtkbevkdwobybefy[.]info"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "ztayporqkxvcxbrkxogmizxwmf[.]biz"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "cmwcmfeicyscojmhdhilfxzhux[.]ru"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "ofxemhpnvghrkxnkrhtdibd[.]com"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "exweytpzzggurvfuddvgkf[.]info"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "host": "hafmvofujbdbijvnbypaytkv[.]org"}], "file": [{"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "path": "%TEMP%\\tmp<random, matching '[0-9a-z]{8}'>.bat"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "path": "%APPDATA%\\<random, matching '[a-z0-9]{3,7}'>"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "path": "%HOMEPATH%\\AppData\\LocalLow\\<random, matching '[a-z]{4,6}.[a-z]{3}'>"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "path": "%APPDATA%\\<random, matching '[A-Z][a-z]{3,5}\\[a-z]{4,6}'>.exe"}], "ip": [{"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "194[.]94[.]127[.]98"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "69[.]39[.]74[.]6"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "24[.]120[.]165[.]58"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "108[.]211[.]64[.]46"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "184[.]156[.]76[.]158"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "155[.]212[.]138[.]69"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "142[.]176[.]125[.]203"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "99[.]68[.]30[.]82"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "96[.]57[.]35[.]109"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "71[.]42[.]56[.]253"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "94[.]67[.]185[.]188"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "199[.]243[.]220[.]218"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "64[.]219[.]121[.]189"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "87[.]203[.]112[.]174"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "85[.]9[.]95[.]205"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "151[.]49[.]166[.]206"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "99[.]95[.]152[.]226"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "50[.]72[.]177[.]24"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "66[.]117[.]77[.]134"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "ip": "142[.]250[.]176[.]196"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba"], "ip": "13[.]107[.]21[.]200"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "ip": "142[.]250[.]80[.]4"}], "mutex": [{"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "name": "Global\\{C30C6CF2-932B-408E-55BA-04D54CAC27C8}"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "name": "Global\\{73DE6ED9-9100-F05C-55BA-04D54CAC27C8}"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "name": "Global\\{A9348FD8-7001-2AB6-55BA-04D54CAC27C8}"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "name": "Global\\{A9348FDF-7006-2AB6-55BA-04D54CAC27C8}"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "name": "Local\\{C8D239CA-C613-4B50-55BA-04D54CAC27C8}"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "name": "Local\\{C8D239CB-C612-4B50-55BA-04D54CAC27C8}"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "name": "GLOBAL\\{<random GUID>}"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "name": "Local\\{<random GUID>}"}], "registry": [{"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "{2EC645E8-BA31-AD44-55BA-04D54CAC27C8}"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b", "34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba", "559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8", "80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1", "8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6", "d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08", "d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2", "d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d", "da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "key": "<HKCU>\\Software\\Microsoft\\<random, matching '[A-Z][a-z]{3,11}'>", "value_name": null}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1"], "key": "\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": ""}, {"hashes": ["250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\TRACING\\XMLPROVI", "value_name": null}, {"hashes": ["250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\TRACING\\XMLPROVI", "value_name": "EnableFileTracing"}, {"hashes": ["250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\TRACING\\XMLPROVI", "value_name": "EnableConsoleTracing"}, {"hashes": ["250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\TRACING\\XMLPROVI", "value_name": "FileTracingMask"}, {"hashes": ["250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\TRACING\\XMLPROVI", "value_name": "ConsoleTracingMask"}, {"hashes": ["250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\TRACING\\XMLPROVI", "value_name": "MaxFileSize"}, {"hashes": ["250c240a2a8fc8c12f4a93d56c1926ff4f898a4970bc15a11a39eb50d1fc58ce"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\TRACING\\XMLPROVI", "value_name": "FileDirectory"}, {"hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ITDOO", "value_name": "jei6ha"}, {"hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ITDOO", "value_name": "2363bdic"}, {"hashes": ["d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\XUXO", "value_name": "20ij6d32"}, {"hashes": ["d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\XUXO", "value_name": "f82b704"}, {"hashes": ["8e22b8f7059b91ae11964886a0f38b7bc743d6a6ca0b7df4975f81552ff0edd6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\ITDOO", "value_name": "4b91d34"}, {"hashes": ["d846df9dbc6c9d7010e3fd4d2c1cf5ce42adaa24b832d1f1ed7a5604f5f5956d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\XUXO", "value_name": "1h72e0hc"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\NAYRU", "value_name": "a3572fh"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\NAYRU", "value_name": "1dc39c87"}, {"hashes": ["d5e284410ffc8331c5b99940b6f1bc77c0c7d29445de7ad33d625f1ebd63ea08"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\NAYRU", "value_name": "deieaab"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\UXYCIB", "value_name": "134i55g1"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\UXYCIB", "value_name": "36dbj54b"}, {"hashes": ["d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\YWUN", "value_name": "18ifc40i"}, {"hashes": ["d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\YWUN", "value_name": "2cbcb7fc"}, {"hashes": ["34804aacde53e35cdd4385943d77c879d0f0e58b62ce3429d59d610ba1b883ba"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\UXYCIB", "value_name": "j89hi4f"}, {"hashes": ["d6134594f22e2a9cff602184ab018753a180f24752393d793586d0ea4c91fce2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\YWUN", "value_name": "1ce82898"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\CYVEIK", "value_name": "23f32dde"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\CYVEIK", "value_name": "c21g8"}, {"hashes": ["559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OLKEO", "value_name": "gfc70j1"}, {"hashes": ["da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\PYZA", "value_name": "ibf79ij"}, {"hashes": ["559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OLKEO", "value_name": "30aga713"}, {"hashes": ["da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\PYZA", "value_name": "2iei73j5"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\LONOFY", "value_name": "34390i5"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\LONOFY", "value_name": "24f9c3hj"}, {"hashes": ["80e3631309c690416b75f24fba4a43040adb7f79569d3bd87940a02e089bc3d1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\CYVEIK", "value_name": "275b40d8"}, {"hashes": ["559322ef31c95e8d2498bfeb17ea4c59f207bc6dc2750b76f9aec259afd8e1c8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OLKEO", "value_name": "11dcj68j"}, {"hashes": ["da90e2724c3a78816be07d03baa5344bc7c4e468c3fd14b5af057de9ae4f930e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\PYZA", "value_name": "122660ed"}, {"hashes": ["323a57e10f9a124a22314c6137a9b5553f09537f79218c791534ca1ede0aa62b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\LONOFY", "value_name": "801ehf7"}]}, "reports_count": 19}, "Win.Ransomware.TeslaCrypt-9998112-0": {"bis": [{"bi": "antivirus-service-flagged-artifact", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "2401f788baf9df6bce1556b147f7fbb3b8f5f244f60405dd0d1e0be3d1fe191e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "memory-execute-readwrite", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "2401f788baf9df6bce1556b147f7fbb3b8f5f244f60405dd0d1e0be3d1fe191e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "nginx-webserver-detected", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "dns-query-nxdomain", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "process-requested-named-pipe", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "deleted-submitted-file", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005"]}, {"bi": "enumeration-browser-information", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119", "T1552", "T1539", "T1555"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "public-ip-address-identification-attempt", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "registry-autorun-key-modified", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "registry-autorun-suspicious-public-ip", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "modified-file-in-program-dir", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "http-response-redirect", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "url-not-found", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "unsigned-roaming-execution", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005"]}, {"bi": "process-hollowing-detected", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-file-on-usb", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0011", "T1092"]}, {"bi": "startup-folder-modification", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "excessive-file-modifications", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "process-check-browser-mail-client-files", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0007", "T1518"]}, {"bi": "command-deleted-shadow-copy", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0040", "T1490"]}, {"bi": "malware-generic-ransomware-entropy", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "malware-generic-ransomware-backup-del", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "feed-domain-ransomware", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-deletion", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005"]}, {"bi": "malware-generic-ransomware-notes", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "firefox-prefs-modified", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0009"]}, {"bi": "recycler-file-creation", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-generic-ransomware", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "possible-privilege-escalation-detected", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0004", "T1068"]}, {"bi": "process-read-ie-cookies", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0009", "T1005", "T1119"]}, {"bi": "bcdedit-disable-recovery", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0040", "T1490"]}, {"bi": "bcdedit-ignore-failure", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0040", "T1490"]}, {"bi": "malware-ransomware-teslacrypt-22", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0040", "T1486"]}, {"bi": "malware-ransomware-teslacrypt-30", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0040", "T1486"]}, {"bi": "process-deletes-many-files", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "artifact-multiple-extensions", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "T1036"]}, {"bi": "malware-generic-infostealer", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119", "T1552"]}, {"bi": "enumeration-email-program-information", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1087", "T1005", "T1119", "T1114", "T1552"]}, {"bi": "process-check-zone-identifier", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0007", "TA0005", "T1518", "T1553"]}, {"bi": "artifact-rss-feeds", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "created-executable-sample-appdata", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "T1564"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454"], "mitre_attack_tags": []}, {"bi": "network-dns-category-proxy", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454"], "mitre_attack_tags": []}, {"bi": "process-with-multiple-children", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005"]}, {"bi": "process-modified-quick-launch-file", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0003", "T1176"]}, {"bi": "decoy-wpfv", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0001", "T1566"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "http-response-client-error", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0005", "TA0007"]}, {"bi": "pe-imports-psapi-dll", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "html-iframe-no-space", "hashes": ["093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8"], "mitre_attack_tags": []}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "TeslaCrypt is a well-known ransomware family that encrypts a user's files and demands a Bitcoin payment in exchange for a file decryption service. A flaw in the encryption algorithm was discovered that allowed files to be decrypted without paying the ransomware, and eventually, the malware developers released the master key allowing all encrypted files to be recovered easily.", "hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "2401f788baf9df6bce1556b147f7fbb3b8f5f244f60405dd0d1e0be3d1fe191e", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "iocs": {"domain": [{"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "host": "myexternalip[.]com"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "host": "ceremonyofficiants[.]com"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "host": "vinvish[.]com"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "host": "mugegorcuk[.]com"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "host": "sistemaslye[.]com"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "host": "w3dot[.]info"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "host": "www[.]ceremonyofficiants[.]com"}, {"hashes": ["25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "host": "www[.]bing[.]com"}], "file": [{"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$I08BO8F.xlsx"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$I11KHR4.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$I5QKHLN.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$I62TWBD.ppt"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$I6FZORX.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IABMX83.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IAJ2Y6R.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IALGTCS.xlsx"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IGTBBSA.accdb"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IH49RPF.ppt"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IH71GGR.ppt"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IJKODPH.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IJP965K.accdb"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IKY5R3M.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IMYCSIT.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$ISLP722.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IXLC77A.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IXUL2U1.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IYSR1FU.ppt"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$IZ2GMJW.XLSX"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$R08BO8F.xlsx"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$R11KHR4.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$R5QKHLN.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$R62TWBD.ppt"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$R6FZORX.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RABMX83.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RAJ2Y6R.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RALGTCS.xlsx"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RGTBBSA.accdb"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RH49RPF.ppt"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RH71GGR.ppt"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RJKODPH.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RJP965K.accdb"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RKY5R3M.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RMYCSIT.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RSLP722.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RXLC77A.pdf"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RXUL2U1.doc"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RYSR1FU.ppt"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\$RZ2GMJW.XLSX"}, {"hashes": ["9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "path": "%APPDATA%\\higvl-a.exe"}, {"hashes": ["1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562"], "path": "\\$Recycle.Bin\\how_recover+lhm.txt"}, {"hashes": ["cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "path": "\\$Recycle.Bin\\<User SID>\\how_recover+ucq.html"}, {"hashes": ["cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "path": "\\$Recycle.Bin\\<User SID>\\how_recover+ucq.txt"}, {"hashes": ["cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "path": "\\$Recycle.Bin\\how_recover+ucq.html"}, {"hashes": ["cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "path": "\\$Recycle.Bin\\how_recover+ucq.txt"}, {"hashes": ["8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26"], "path": "\\$Recycle.Bin\\<User SID>\\how_recover+gsh.html"}, {"hashes": ["8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26"], "path": "\\$Recycle.Bin\\<User SID>\\how_recover+gsh.txt"}, {"hashes": ["8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26"], "path": "\\$Recycle.Bin\\how_recover+gsh.html"}, {"hashes": ["8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26"], "path": "\\$Recycle.Bin\\how_recover+gsh.txt"}], "ip": [{"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "ip": "34[.]160[.]111[.]145"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "ip": "192[.]190[.]221[.]49"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "ip": "160[.]153[.]47[.]137"}, {"hashes": ["25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "ip": "13[.]107[.]21[.]200"}], "mutex": [{"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "name": "78456214324124"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "name": "Global\\C::Users:Administrator:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!16613a8"}], "registry": [{"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLinkedConnections"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKCU>\\SOFTWARE\\ZSYS", "value_name": null}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.CHECK.0", "value_name": "CheckSetting"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKCU>\\SOFTWARE\\ZSYS", "value_name": "ID"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "hgjuy78gfh"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "hgjuy78gfh"}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKCU>\\Software\\<random, matching '[A-Z0-9]{14,16}'>", "value_name": null}, {"hashes": ["04299f4d006c5d6b18d192bf71e98527db0fe462ab8e0ee9cfcf62798b5a8789", "093e661a132c0a6c8405897478e40c2b7ac750817d490b6eec3bdab109bef391", "1b0b39804d7a92ee2a7e4cfef28766666a2082a01961e78bfa79805ccadd6562", "25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "297bcef62a1b88a614615e7fd022d8b1243874b2d4d0ac639d167b53464919c8", "331b989a3f98d026d7e285b40904a118699d7391efc2d2ef16c6ee81e1c378f3", "3a912d051d4544720511d30e65d627a974cacfa14635dd4688016ebb17fc160b", "5602c335943bf9835a9c9048e56c554e7ceed17f1e4d39332ac020a6517c4454", "7c609b5066a69eb0b9d0a7fc7273e54773837d4342381751370f9a2dda51dc58", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "9b01cc5b9bcc1322756605c9a24a0b2b6a02f23df0341e154f650df3d7db9be8", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "d6fdf4d481ae45dd717cd8ee5877d89879da34ced6f5dc6e9ab9d1eb1d13a1eb", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKCU>\\Software\\<random, matching '[A-Z0-9]{14,16}'>", "value_name": "data"}, {"hashes": ["25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7", "f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXT\\STATS\\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}", "value_name": null}, {"hashes": ["25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SEARCHSCOPES\\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}", "value_name": "FaviconPath"}, {"hashes": ["25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SEARCHSCOPES\\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}", "value_name": "Deleted"}, {"hashes": ["25c1c67de6ead9c4efd8372caccfbba80cc77667dd9b172e5535b1c7a7b81a5e", "8b7e0fab0d039591a911e0cdbe07d357b8749873e9318cf07a0a02b376118d26", "cab15a34c5c4c4560d5d3db982e1ec7de1b966670844e01287901e99c44109c7"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SEARCHSCOPES", "value_name": "DefaultScope"}, {"hashes": ["f5a609839ae2e0049a6beb793d8d0dbb4446da0fd0759458a2350a3b18bb0513"], "key": "EXT\\STATS\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\IEXPLORE", "value_name": ""}]}, "reports_count": 15}, "Win.Trojan.Vobfus-9997065-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "pe-packed-upx", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-http-numeric-ip", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-communications-http-post", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "deleted-submitted-file", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0005"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "network-http-blank-user-agent", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "http-response-server-error", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0005", "TA0007"]}, {"bi": "pe-resource-lang-russian", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": []}, {"bi": "pe-tls-callback", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": []}, {"bi": "pe-header-timestamp-null", "hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff"], "mitre_attack_tags": []}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Vobfus is a worm that copies itself to external drives and attempts to gain automatic code execution via autorun.inf files. It also modifies the registry so that it will launch when the system is booted. Once installed, it attempts to download follow-on malware from its command and control (C2) servers.", "hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "iocs": {"domain": [], "file": [{"hashes": ["69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff"], "path": "%ProgramData%\\gHf24500nEkMf24500\\gHf24500nEkMf24500"}, {"hashes": ["1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f"], "path": "%ProgramData%\\fBl06509fHaFi06509\\fBl06509fHaFi06509"}, {"hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "path": "%ProgramData%\\fFc01831iNpBg01831\\fFc01831iNpBg01831"}, {"hashes": ["69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff"], "path": "%ProgramData%\\gHf24500nEkMf24500\\gHf24500nEkMf24500.exe"}, {"hashes": ["69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff"], "path": "\\TEMP\\69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff"}, {"hashes": ["2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a"], "path": "%ProgramData%\\cKd06511fFeLh06511\\cKd06511fFeLh06511"}, {"hashes": ["1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f"], "path": "%ProgramData%\\fBl06509fHaFi06509\\fBl06509fHaFi06509.exe"}, {"hashes": ["1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f"], "path": "\\TEMP\\1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f"}, {"hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "path": "%ProgramData%\\fFc01831iNpBg01831\\fFc01831iNpBg01831.exe"}, {"hashes": ["ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "path": "\\TEMP\\ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"}, {"hashes": ["56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "path": "%ProgramData%\\fIl01819hIoLc01819\\fIl01819hIoLc01819"}, {"hashes": ["830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e"], "path": "%ProgramData%\\fHd24500bPkOh24500\\fHd24500bPkOh24500"}, {"hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d"], "path": "%ProgramData%\\gDb06504iEkOd06504\\gDb06504iEkOd06504"}, {"hashes": ["2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a"], "path": "%ProgramData%\\cKd06511fFeLh06511\\cKd06511fFeLh06511.exe"}, {"hashes": ["2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a"], "path": "\\TEMP\\2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a"}, {"hashes": ["48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d"], "path": "%ProgramData%\\gPf01814mElFk01814\\gPf01814mElFk01814"}, {"hashes": ["6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7"], "path": "%ProgramData%\\lDg01803cJoMl01803\\lDg01803cJoMl01803"}, {"hashes": ["830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e"], "path": "%ProgramData%\\fHd24500bPkOh24500\\fHd24500bPkOh24500.exe"}, {"hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d"], "path": "%ProgramData%\\gDb06504iEkOd06504\\gDb06504iEkOd06504.exe"}, {"hashes": ["830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e"], "path": "\\TEMP\\830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e"}, {"hashes": ["697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962"], "path": "%ProgramData%\\ePo01828jEjJh01828\\ePo01828jEjJh01828"}, {"hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d"], "path": "\\TEMP\\0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d"}, {"hashes": ["56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "path": "%ProgramData%\\fIl01819hIoLc01819"}, {"hashes": ["94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf"], "path": "%ProgramData%\\gPd01804pOmHn01804\\gPd01804pOmHn01804"}, {"hashes": ["56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "path": "%ProgramData%\\fIl01819hIoLc01819\\fIl01819hIoLc01819.exe"}, {"hashes": ["603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9"], "path": "%ProgramData%\\pHo01805mElFi01805\\pHo01805mElFi01805"}, {"hashes": ["56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"], "path": "\\TEMP\\56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568"}, {"hashes": ["99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935"], "path": "%ProgramData%\\gNh01820pIaGh01820\\gNh01820pIaGh01820"}, {"hashes": ["48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d"], "path": "%ProgramData%\\gPf01814mElFk01814"}, {"hashes": ["48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d"], "path": "%ProgramData%\\gPf01814mElFk01814\\gPf01814mElFk01814.exe"}, {"hashes": ["48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d"], "path": "\\TEMP\\48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d"}, {"hashes": ["6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7"], "path": "%ProgramData%\\lDg01803cJoMl01803"}, {"hashes": ["6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7"], "path": "%ProgramData%\\lDg01803cJoMl01803\\lDg01803cJoMl01803.exe"}, {"hashes": ["6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7"], "path": "\\TEMP\\6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7"}, {"hashes": ["94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf"], "path": "%ProgramData%\\gPd01804pOmHn01804"}, {"hashes": ["94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf"], "path": "%ProgramData%\\gPd01804pOmHn01804\\gPd01804pOmHn01804.exe"}, {"hashes": ["603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9"], "path": "%ProgramData%\\pHo01805mElFi01805"}, {"hashes": ["94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf"], "path": "\\TEMP\\94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf"}, {"hashes": ["603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9"], "path": "%ProgramData%\\pHo01805mElFi01805\\pHo01805mElFi01805.exe"}, {"hashes": ["603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9"], "path": "\\TEMP\\603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9"}, {"hashes": ["7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20"], "path": "%ProgramData%\\dPo01813nFgGl01813\\dPo01813nFgGl01813"}, {"hashes": ["99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935"], "path": "%ProgramData%\\gNh01820pIaGh01820"}, {"hashes": ["99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935"], "path": "%ProgramData%\\gNh01820pIaGh01820\\gNh01820pIaGh01820.exe"}, {"hashes": ["99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935"], "path": "\\TEMP\\99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935"}, {"hashes": ["7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20"], "path": "%ProgramData%\\dPo01813nFgGl01813"}, {"hashes": ["7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20"], "path": "%ProgramData%\\dPo01813nFgGl01813\\dPo01813nFgGl01813.exe"}, {"hashes": ["697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962"], "path": "%ProgramData%\\ePo01828jEjJh01828"}, {"hashes": ["7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20"], "path": "\\TEMP\\7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20"}, {"hashes": ["697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962"], "path": "%ProgramData%\\ePo01828jEjJh01828\\ePo01828jEjJh01828.exe"}, {"hashes": ["697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962"], "path": "\\TEMP\\697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962"}], "ip": [{"hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "ip": "69[.]50[.]208[.]17"}, {"hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "ip": "91[.]193[.]194[.]43"}], "mutex": [{"hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "name": "HHUdgyTYTdgysgdYYFDTSFDTghvh"}, {"hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "name": "HDHUAbdYYdysgYAYAGYDSgydssyY"}, {"hashes": ["0c68ade090284789059722d8fadd314cb034b93a90a18498fdc3fbc65726ce0d", "1d2f39b5f58de40788b3f9e78e637c0824c4b6fc0f32f0703099cf7ff1b4dd5f", "2ebd16a264a25cca519a446d7c01816535f8f29d405e2023182b40e910faa50a", "48bfb384e68cf665c724722e37bb61aa1039e22ac978fdc6d507b0a46c38b67d", "56339ae292b244e84f53ad957174ab5767c54a70e2394be666bee52f1d686568", "603dcbd333df7de2d23c28f677900f7e5c4299fcc6da96ade60b92b5731c5fd9", "697a5de897b686f9729a41baff2034f35fd37851baa57914792ae0c3df203962", "69fe340067c452a8c1099d895047587c83557ab7525d56e8713c71b1a2b378ff", "6a535c1797c0f36ba2ed2ca0ff87bc512a6ef4bc2341ffafb20b05397c7c3df7", "7c423c22cbedf35cdcf0a9b987de1f43575d1592a6e0c25bd6bbce0b0964dd20", "830c02fa1f60800beb319565de95727caa89e778b2a571547d834c80167cec9e", "94e417ffbd477cf0f556e83e33a796f8d26e595c3fbe3cd7f0d250b37fea27bf", "99d2da258a7c890307c6be6a0c082bae5922cbc866a3285522ca22a66d9a3935", "ec9626d0df54277f6706a6b3d799ec1326b7083bb48990bf39e242be0dd52903"], "name": "KodjUGydtfTDFRbjNJUFRTdreRRd"}], "registry": []}, "reports_count": 14}, "Win.Virus.Ramnit-9997053-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "artifact-windows-task", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "registry-autorun-key-modified", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "artifact-flagged-vm", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "TA0007"]}, {"bi": "registry-service-autostart-disabled", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "TA0040", "TA0003", "TA0004", "T1112", "T1574", "T1489"]}, {"bi": "registry-disablesuac", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "TA0004", "T1548", "T1562"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "startup-folder-modification", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "network-dns-safe-categories", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "registry-firewall-exceptions-enabled", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-disable-windefender", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "malware-ramnit-mutex", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "disables-windows-firewall", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "disables-security-center-notifications", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-winlogon-key-value-modified-to-userinit", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1547"]}, {"bi": "registry-firewall-notifications-disabled", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "process-override-security-center-monitoring", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "dns-query-nxdomain", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "feed-domain-banking", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "network-dns-category-cnc", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0011"]}, {"bi": "possible-dga-communication", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0011", "T1568"]}, {"bi": "malware-ramnit-snort", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": []}, {"bi": "network-dns-malicious-snort", "hashes": ["10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "pe-uses-armadillo", "hashes": ["31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f"], "mitre_attack_tags": ["TA0005", "TA0007", "T1027"]}, {"bi": "dns-excessive-domain-queries", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "hook-installed", "hashes": ["13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "pe-resource-lang-chinese", "hashes": ["a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f"], "mitre_attack_tags": []}, {"bi": "excessive-dns-query-nxdomain", "hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "pe-imports-psapi-dll", "hashes": ["7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "mitre_attack_tags": ["TA0007", "T1057"]}], "category": "Virus", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Ramnit is a banking trojan that monitors web browser activity on an infected machine and collects login information from financial websites. It also can steal browser cookies and attempts to hide from popular antivirus software.", "hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "iocs": {"domain": [{"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "host": "google[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "host": "testetst[.]ru"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "mtsoexdphaqliva[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "uulwwmawqjujuuprpp[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "twuybywnrlqcf[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "wcqqjiixqutt[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "ubgjsqkad[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "iihsmkek[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "tlmmcvqvearpxq[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "flkheyxtcedehipox[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "edirhtuawurxlobk[.]com"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "host": "tfjcwlxcjoviuvtr[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "otdwndjgsva[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "pldatiuumyt[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "prgmrqjhwu[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "qcskrkqk[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "qihksfkx[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "retnjlfw[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "rgiqbupr[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "riayppnnk[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "ryonuefbyx[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "tcxkbjutij[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "tfjmhkaluy[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "tmergqcjkde[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "ubnlwvgc[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "uburgajtcn[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "uwgsshurmfd[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "vgcniftbxv[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "vhiawuhgr[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "wigjmqwqr[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "wyjxmmfgnp[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "xhyioewdpbl[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "xidfuiuo[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "xngbwcnhtq[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "xtjackbls[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "yhsadxmqh[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "ypaynkhlqme[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "yyeonabvcqr[.]com"}, {"hashes": ["10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345"], "host": "wdgqvaya[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "mqxbfouny[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "mjuupgtmhm[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "bgaxmejyk[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "sdbjsmlpvos[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "fuwswxvw[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "umkfqcub[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "agatpgem[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "kitmwvtacq[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "klneodwxoe[.]com"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "host": "axvibsftsb[.]com"}, {"hashes": ["10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345"], "host": "gfaronvw[.]com"}], "file": [{"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "path": "%LOCALAPPDATA%\\bolpidti"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "path": "%LOCALAPPDATA%\\bolpidti\\judcsgdy.exe"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\judcsgdy.exe"}, {"hashes": ["13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a"], "path": "\\TEMP\\0OwAGLh"}, {"hashes": ["8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "path": "\\TEMP\\eWGQvZDz5"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "path": "\\TEMP\\Mx0nJh3"}, {"hashes": ["10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345"], "path": "\\TEMP\\emf"}, {"hashes": ["10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345"], "path": "\\TEMP\\Z9PJGNNd"}, {"hashes": ["7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641"], "path": "\\TEMP\\9CqjBXH3x"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "path": "\\TEMP\\yvQIHJ1P6"}], "ip": [{"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "ip": "142[.]250[.]65[.]174"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "ip": "195[.]201[.]179[.]207"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "ip": "208[.]100[.]26[.]245"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "ip": "35[.]205[.]61[.]67"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "ip": "72[.]26[.]218[.]70"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "ip": "206[.]191[.]152[.]58"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "ip": "46[.]165[.]254[.]201"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "ip": "104[.]247[.]81[.]50"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "ip": "72[.]251[.]233[.]245"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a"], "ip": "104[.]247[.]81[.]54"}, {"hashes": ["10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345"], "ip": "46[.]165[.]220[.]145"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "ip": "217[.]20[.]116[.]140"}, {"hashes": ["10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345"], "ip": "173[.]231[.]184[.]122"}, {"hashes": ["10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345"], "ip": "199[.]21[.]76[.]77"}, {"hashes": ["76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836"], "ip": "64[.]225[.]91[.]73"}], "mutex": [{"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "name": "{7930D12C-1D38-EB63-89CF-4C8161B79ED4}"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "name": "{79345B6A-421F-2958-EA08-07396ADB9E27}"}], "registry": [{"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "AntiVirusOverride"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "AntiVirusDisableNotify"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "FirewallDisableNotify"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "FirewallOverride"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "UpdatesDisableNotify"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "UacDisableNotify"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLUA"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "EnableFirewall"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "DoNotAllowExceptions"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "DisableNotifications"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSCSVC", "value_name": "Start"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINDEFEND", "value_name": "Start"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\MPSSVC", "value_name": "Start"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION", "value_name": "jfghdug_ooetvtgk"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "JudCsgdy"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WUAUSERV", "value_name": "Start"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Windows Defender"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "Userinit"}, {"hashes": ["09055a88d6d26119fe3f4ac9dc6141758707d29728a052aae24c2f5420e63e3f", "10f7326ddfa4efba4045522b6a302759ce6676b7a010a7ecc35a6564d007c345", "13b7c8e7f6c8b6093ca1a841736a150ca39509f97f65e4df0fa4e25740079946", "31d3c7955e6b2f749d894826b843158ba8e9889ad2e2851f8224fdb3f7c9cd74", "4221ef633be6b47753cf0c965059d09dacb3fc9a69eaf0a43dbbc2e03b01972c", "76b4a1531af677c6b03a237b3dace01fb835854054ab3d0637043982d6647836", "7979e85e99f98ef2ea9c410af8f9e359c4113c4bc1c35f40c07392dd51d72641", "86bb8476332fdf2c10a02ec25cb0491fcae4b2dc7eb61e6d952f5796ecd5614a", "8c50868d349f8307464281a9c4251cdf2da1d43667b3a4b7a9830f0e977ce1e4", "a9641f14c64ceaa70082151666b33aad9660977aaa0b7210a629f4b96545835a", "c6c21d555e9c8cc03c53ee928bd02f0f9377b40e793c98e3ff992fd36a6de804"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "Userinit"}]}, "reports_count": 11}, "exprev": [], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2023-04-21T13:24:25+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Win.Dropper.Zeus-9997235-0", "Win.Dropper.Shiz-9997181-0", "Win.Virus.Ramnit-9997053-0", "Win.Dropper.Bunitu-9997037-0", "Win.Trojan.Vobfus-9997065-0", "Win.Dropper.DarkKomet-9998118-0", "Win.Ransomware.TeslaCrypt-9998112-0", "Win.Dropper.Ryuk-9998099-0", "Win.Dropper.Tofsee-9998087-0"]}