25:I[10321,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/3k0jjn7m8jtc5.js","/_next/static/chunks/3xfwong8gg51p.js","/_next/static/chunks/1kn_tf3p-ubex.js"],"ReportDetailWrapper"] 2d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 24:T55d,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Generic.Ransom.Small — Falcon Sandbox Report — Score 100/100 — Sample 06b453e6e2d5…","description":"Malicious verdict for sandbox report 5eeb8a48e14a…. Malware family: Generic.Ransom.Small. Threat score 100/100. 5 malicious and 13 suspicious behavioral indicators across 36 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4/5eeb8a48e14ac2580b673b4a","keywords":["Malicious","Generic.Ransom.Small","sandbox report","malware analysis","MITRE ATT\u0026CK","06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4"],"about":{"@type":"SoftwareApplication","name":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4","applicationCategory":"PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows","identifier":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Generic.Ransom.Small","sandboxEnvironment":"Windows 7 64 bit","behavioralIndicators":{"malicious":5,"suspicious":13,"totalSignatures":36},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}26:T570,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27:Ta39,".exe" queries volume information of "C:\06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe" at 00077451-00001816-00000046-3828261893 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll" at 00077451-00001816-00000046-4109467827 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll" at 00077451-00001816-00000046-4124481471 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll" at 00077451-00001816-00000046-4354007960 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll" at 00077451-00001816-00000046-4365422038 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll" at 00077451-00001816-00000046-4786369847 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll" at 00077451-00001816-00000046-4798849941 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll" at 00077451-00001816-00000046-5080430946 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll" at 00077451-00001816-00000046-5096442311 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll" at 00077451-00001816-00000046-6458074211 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll" at 00077451-00001816-00000046-6467258565 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll" at 00077451-00001816-00000046-7900822840 ".exe" queries volume information of "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll" at 00077451-00001816-00000046-791560696628:Ta78,".exe" touched "Computer" (Path: "HKCU\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SHELLFOLDER") ".exe" touched "Network" (Path: "HKCU\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\SHELLFOLDER") ".exe" touched "Recycle Bin" (Path: "HKCU\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\SHELLFOLDER") ".exe" touched "Control Panel" (Path: "HKCU\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\SHELLFOLDER") ".exe" touched "UsersFiles" (Path: "HKCU\CLSID\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\SHELLFOLDER") ".exe" touched "UsersLibraries" (Path: "HKCU\CLSID\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\SHELLFOLDER") ".exe" touched "CLSID_SearchFolder" (Path: "HKCU\CLSID\{04731B67-D933-450A-90E6-4ACD2E9408FE}\SHELLFOLDER") ".exe" touched "Microsoft OneNote Namespace Extension for Windows Desktop Search" (Path: "HKCU\CLSID\{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}\SHELLFOLDER") ".exe" touched "IE History and Feeds Shell Data Source for Windows Search" (Path: "HKCU\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\SHELLFOLDER") ".exe" touched "@C:\Program Files (x86)\Microsoft Office\Office15\MAPISHELL.DLL,-110" (Path: "HKCU\CLSID\{138508BC-1E03-49EA-9C8F-EA9E1D05D65D}\SHELLFOLDER") ".exe" touched "Public Folder" (Path: "HKCU\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\SHELLFOLDER") ".exe" touched "Control Panel command object for Start menu and desktop" (Path: "HKCU\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\SHELLFOLDER") ".exe" touched "@%systemroot%\system32\mssvp.dll,-110" (Path: "HKCU\CLSID\{89D83576-6BD1-4C86-9454-BEB04E94C819}\SHELLFOLDER") ".exe" touched "DXP" (Path: "HKCU\CLSID\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\SHELLFOLDER") ".exe" touched "CLSID_SearchHome" (Path: "HKCU\CLSID\{9343812E-1C37-4A49-A12E-4B2D810D956B}\SHELLFOLDER") ".exe" touched "Windows Search Service Media Center Namespace Extension Handler" (Path: "HKCU\CLSID\{98D99750-0B8A-4C59-9151-589053683D73}\SHELLFOLDER") ".exe" touched "Other Users Folder" (Path: "HKCU\CLSID\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\SHELLFOLDER") ".exe" touched "@%systemroot%\system32\mssvp.dll,-112" (Path: "HKCU\CLSID\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}\SHELLFOLDER") ".exe" touched "CLSID_StartMenuProviderFolder" (Path: "HKCU\CLSID\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}\SHELLFOLDER") ".exe" touched "CLSID_StartMenuPathCompleteProviderFolder" (Path: "HKCU\CLSID\{E345F35F-9397-435C-8F95-4E922C26259E}\SHELLFOLDER")29:T48d,".exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\clr.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll" ".exe" touched file "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config" ".exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" ".exe" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\5d0c037297cc1a64b52ce43b45c2ac2e\mscorlib.ni.dll.aux" ".exe" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\fe2524177eb3088c77be666722039f52\mscorlib.ni.dll.aux" ".exe" touched file "C:\Windows\assembly\pubpol201.dat" ".exe" touched file "C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\43d86904e41b891e07c2ce8a20996e2c\System.Windows.Forms.ni.dll.aux" ".exe" touched file "C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll"2a:T8ea,".exe" wrote bytes "48b8e011b3f5fe070000ffe0" to virtual address "0xFE061000" (part of module "WS2_32.DLL") ".exe" wrote bytes "40130000" to virtual address "0xFCC08478" (part of module "SSPICLI.DLL") ".exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF0FB25EB" (part of module "CLR.DLL") ".exe" wrote bytes "00100000" to virtual address "0xFE091748" (part of module "WS2_32.DLL") ".exe" wrote bytes "00100000" to virtual address "0xFCC085A4" (part of module "SSPICLI.DLL") ".exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF0FB264E" (part of module "CLR.DLL") ".exe" wrote bytes "48b81016b3f5fe070000ffe0" to virtual address "0xFCBF1000" (part of module "SSPICLI.DLL") ".exe" wrote bytes "00100000" to virtual address "0xFCC08468" (part of module "SSPICLI.DLL") ".exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF0FB2570" (part of module "CLR.DLL") ".exe" wrote bytes "65488b0425c8140000" to virtual address "0xF0FB2B83" (part of module "CLR.DLL") ".exe" wrote bytes "65488b0425c8140000" to virtual address "0xF0FB2BC0" (part of module "CLR.DLL") ".exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF0FB2533" (part of module "CLR.DLL") ".exe" wrote bytes "40130000" to virtual address "0xFCC08538" (part of module "SSPICLI.DLL") ".exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF0FB28CA" (part of module "CLR.DLL") ".exe" wrote bytes "48b86013b3f5fe070000ffe0" to virtual address "0xFCBF1340" (part of module "SSPICLI.DLL") ".exe" wrote bytes "0010bffcfe070000" to virtual address "0xFCC0FB18" (part of module "SSPICLI.DLL") ".exe" wrote bytes "4013bffcfe070000" to virtual address "0xFCC0FE48" (part of module "SSPICLI.DLL") ".exe" wrote bytes "65488b0425d0140000" to virtual address "0xF0FB2CCB" (part of module "CLR.DLL") ".exe" wrote bytes "0010bffcfe070000" to virtual address "0xFCC0FB50" (part of module "SSPICLI.DLL") ".exe" wrote bytes "65488b0425d0140000" to virtual address "0xF0FB2C8B" (part of module "CLR.DLL")2b:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==2c:T9074,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$24"}}],["$","$L25",null,{"initialData":{"job_id":"5eeb8a48e14ac2580b673b4a","environment_id":120,"environment_description":"Windows 7 64 bit","size":18944,"type":"PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows","type_short":["peexe","assembly","executable"],"type_short_id":".NET exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4","md5":"7b789f2c40af176e70132a5a2001feaf","sha1":"77a5f8cabdd4f4dd0d24cd62038c2f793167f817","sha256":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4","sha512":"3b087acab960236ce4a2f8e6cc54fd88ba0fe8260996ed97a1109ee2f44d919e324067f2a2491d60497060256a8355737bd1772a975dc063a540168534550c25","ssdeep":"384:SrZCpqIQ0Dx5QNpj1q6JnCbuIHK+HQWF2ixc1f41W8:SrZC4ZOQpqoCbhl7ca1","imphash":"f34d5f2d4577ed6d9ceec516c1f5a744","entrypoint":"0x1045f62","entrypoint_section":".text","image_base":null,"subsystem":null,"image_file_characteristics":[],"dll_characteristics":[],"major_os_version":null,"minor_os_version":null,"av_detect":40,"vx_family":"Generic.Ransom.Small","url_analysis":false,"analysis_start_time":"2020-06-18T15:37:48+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":null,"certificates_validation_message":null,"domains":[],"compromised_hosts":[],"hosts":[],"total_network_connections":0,"total_processes":4,"total_signatures":36,"extracted_files":[],"file_metadata":{"file_compositions":[],"imported_objects":[],"file_analysis":[],"total_file_compositions_imports":null},"processes":[{"uid":"00077451-00001816","parentuid":null,"name":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","normalized_path":"C:\\06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","command_line":null,"sha256":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4","av_label":"Generic.Ransom.Small","av_matched":29,"av_total":72,"pid":"1816","icon":"$26","process_flags":[{"name":"Extracted Streams","data":null},{"name":"Multiscan Match","data":"29/72"}]},{"uid":"00077708-00002636","parentuid":"00077451-00001816","name":"vssadmin.exe","normalized_path":"%WINDIR%\\System32\\vssadmin.exe","command_line":"delete shadows /all /quiet","sha256":"4de7fa20e3224382d8c4a81017e5bdd4673afbef9c0f017e203d7b78977fbf8c","av_label":null,"av_matched":null,"av_total":null,"pid":"2636","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00077721-00003580","parentuid":"00077451-00001816","name":"cmd.exe","normalized_path":"%WINDIR%\\System32\\cmd.exe","command_line":"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","sha256":"db06c3534964e3fc79d2763144ba53742d7fa250ca336f4a0fe724b75aaff386","av_label":null,"av_matched":null,"av_total":null,"pid":"3580","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00077726-00002508","parentuid":"00077721-00003580","name":"choice.exe","normalized_path":"%WINDIR%\\System32\\choice.exe","command_line":"choice /C Y /N /D Y /T 5","sha256":"5af7d20da70ccb712c0e441e83f01be0633f6f804289bff1b3ceb5f853f0dc80","av_label":null,"av_matched":null,"av_total":null,"pid":"2508","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]}],"mitre_attcks":[{"tactic":"Execution","technique":"Command-Line Interface","attck_id":"T1059","attck_id_wiki":"https://attack.mitre.org/techniques/T1059","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Runs shell commands"],"parent":null},{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attck_id":"T1215","attck_id_wiki":"https://attack.mitre.org/techniques/T1215","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Opens the Kernel Security Device Driver (KsecDD) of Windows"],"parent":null},{"tactic":"Persistence","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/techniques/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Writes data to a remote process"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/techniques/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/techniques/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Modifies proxy settings"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Writes data to a remote process"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"File Deletion","attck_id":"T1107","attck_id_wiki":"https://attack.mitre.org/techniques/T1107","malicious_identifiers_count":1,"malicious_identifiers":["Deletes volume snapshots (often used by ransomware)"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Software Packing","attck_id":"T1045","attck_id_wiki":"https://attack.mitre.org/techniques/T1045","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Matched Compiler/Packer signature"],"parent":null},{"tactic":"Credential Access","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/techniques/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/techniques/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":4,"suspicious_identifiers":["Reads the active computer name","Reads information about supported languages","Queries sensitive IE security settings","Reads the cryptographic machine GUID"],"informative_identifiers_count":1,"informative_identifiers":["Reads the registry for installed applications"],"parent":null},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attck_id":"T1120","attck_id_wiki":"https://attack.mitre.org/techniques/T1120","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Queries volume information"],"parent":null},{"tactic":"Collection","technique":"Email Collection","attck_id":"T1114","attck_id_wiki":"https://attack.mitre.org/techniques/T1114","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-11","type":6,"relevance":2,"name":"Queries volume information","description":"$27","description_v2":["\".exe\" queries volume information of \"C:\\06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe\" at 00077451-00001816-00000046-3828261893","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll\" at 00077451-00001816-00000046-4109467827","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll\" at 00077451-00001816-00000046-4124481471","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll\" at 00077451-00001816-00000046-4354007960","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll\" at 00077451-00001816-00000046-4365422038","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll\" at 00077451-00001816-00000046-4786369847","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll\" at 00077451-00001816-00000046-4798849941","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll\" at 00077451-00001816-00000046-5080430946","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll\" at 00077451-00001816-00000046-5096442311","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Accessibility.dll\" at 00077451-00001816-00000046-6458074211","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Accessibility.dll\" at 00077451-00001816-00000046-6467258565","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll\" at 00077451-00001816-00000046-7900822840","\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll\" at 00077451-00001816-00000046-7915606966"],"description_v3":[{"type":"text","value":"\".exe\" queries volume information of \"C:\\06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe\" at 00077451-00001816-00000046-3828261893"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"%WINDIR%\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll\" at 00077451-00001816-00000046-4109467827"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll\" at 00077451-00001816-00000046-4124481471"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll\" at 00077451-00001816-00000046-4354007960"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll\" at 00077451-00001816-00000046-4365422038"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll\" at 00077451-00001816-00000046-4786369847"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll\" at 00077451-00001816-00000046-4798849941"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll\" at 00077451-00001816-00000046-5080430946"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll\" at 00077451-00001816-00000046-5096442311"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Accessibility.dll\" at 00077451-00001816-00000046-6458074211"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Accessibility.dll\" at 00077451-00001816-00000046-6467258565"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll\" at 00077451-00001816-00000046-7900822840"},{"type":"linebreak"},{"type":"text","value":"\".exe\" queries volume information of \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll\" at 00077451-00001816-00000046-7915606966"}],"origin":"API Call","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1120","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-55","type":3,"relevance":10,"name":"Reads the registry for installed applications","description":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\VSSADMIN.EXE\")\n \".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\VSSADMIN.EXE\")\n \".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")\n \".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")","description_v2":["\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\VSSADMIN.EXE\")","\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\VSSADMIN.EXE\")","\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")","\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")"],"description_v3":[{"type":"text","value":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\VSSADMIN.EXE\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\VSSADMIN.EXE\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\CMD.EXE\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-7","type":2,"relevance":1,"name":"Contains PDB pathways","description":"\"%USERPROFILE%\\Desktop\\Move\\Versions\\enc - para\\DeathV2 - Filestream Version\\Death\\obj\\Release\\ssvchost.pdb\"","description_v2":["\"%USERPROFILE%\\Desktop\\Move\\Versions\\enc - para\\DeathV2 - Filestream Version\\Death\\obj\\Release\\ssvchost.pdb\""],"description_v3":[{"type":"text","value":"\"%USERPROFILE%\\Desktop\\Move\\Versions\\enc - para\\DeathV2 - Filestream Version\\Death\\obj\\Release\\ssvchost.pdb\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\ZonesCacheCounterMutex\"","description_v2":["\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"","\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"","\"Local\\ZonesLockedCacheCounterMutex\"","\"Local\\ZonesCacheCounterMutex\""],"description_v3":[{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\ZonesLockedCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\ZonesCacheCounterMutex\""}],"origin":"Created Mutant","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-3","type":10,"relevance":0,"name":"Loads the .NET runtime environment","description":"\".exe\" loaded module \"%WINDIR%\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll\" at EB700000","description_v2":["\".exe\" loaded module \"%WINDIR%\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll\" at EB700000"],"description_v3":[{"type":"text","value":"\".exe\" loaded module \"%WINDIR%\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll\" at EB700000"}],"origin":"Loaded Module","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-72","type":3,"relevance":3,"name":"Overview of unique CLSIDs touched in registry","description":"$28","description_v2":["\".exe\" touched \"Computer\" (Path: \"HKCU\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")","\".exe\" touched \"Network\" (Path: \"HKCU\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\SHELLFOLDER\")","\".exe\" touched \"Recycle Bin\" (Path: \"HKCU\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\SHELLFOLDER\")","\".exe\" touched \"Control Panel\" (Path: \"HKCU\\CLSID\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\SHELLFOLDER\")","\".exe\" touched \"UsersFiles\" (Path: \"HKCU\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\SHELLFOLDER\")","\".exe\" touched \"UsersLibraries\" (Path: \"HKCU\\CLSID\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\\SHELLFOLDER\")","\".exe\" touched \"CLSID_SearchFolder\" (Path: \"HKCU\\CLSID\\{04731B67-D933-450A-90E6-4ACD2E9408FE}\\SHELLFOLDER\")","\".exe\" touched \"Microsoft OneNote Namespace Extension for Windows Desktop Search\" (Path: \"HKCU\\CLSID\\{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}\\SHELLFOLDER\")","\".exe\" touched \"IE History and Feeds Shell Data Source for Windows Search\" (Path: \"HKCU\\CLSID\\{11016101-E366-4D22-BC06-4ADA335C892B}\\SHELLFOLDER\")","\".exe\" touched \"@C:\\Program Files (x86)\\Microsoft Office\\Office15\\MAPISHELL.DLL,-110\" (Path: \"HKCU\\CLSID\\{138508BC-1E03-49EA-9C8F-EA9E1D05D65D}\\SHELLFOLDER\")","\".exe\" touched \"Public Folder\" (Path: \"HKCU\\CLSID\\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\\SHELLFOLDER\")","\".exe\" touched \"Control Panel command object for Start menu and desktop\" (Path: \"HKCU\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\SHELLFOLDER\")","\".exe\" touched \"@%systemroot%\\system32\\mssvp.dll,-110\" (Path: \"HKCU\\CLSID\\{89D83576-6BD1-4C86-9454-BEB04E94C819}\\SHELLFOLDER\")","\".exe\" touched \"DXP\" (Path: \"HKCU\\CLSID\\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\\SHELLFOLDER\")","\".exe\" touched \"CLSID_SearchHome\" (Path: \"HKCU\\CLSID\\{9343812E-1C37-4A49-A12E-4B2D810D956B}\\SHELLFOLDER\")","\".exe\" touched \"Windows Search Service Media Center Namespace Extension Handler\" (Path: \"HKCU\\CLSID\\{98D99750-0B8A-4C59-9151-589053683D73}\\SHELLFOLDER\")","\".exe\" touched \"Other Users Folder\" (Path: \"HKCU\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\SHELLFOLDER\")","\".exe\" touched \"@%systemroot%\\system32\\mssvp.dll,-112\" (Path: \"HKCU\\CLSID\\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}\\SHELLFOLDER\")","\".exe\" touched \"CLSID_StartMenuProviderFolder\" (Path: \"HKCU\\CLSID\\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}\\SHELLFOLDER\")","\".exe\" touched \"CLSID_StartMenuPathCompleteProviderFolder\" (Path: \"HKCU\\CLSID\\{E345F35F-9397-435C-8F95-4E922C26259E}\\SHELLFOLDER\")"],"description_v3":[{"type":"text","value":"\".exe\" touched \"Computer\" (Path: \"HKCU\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"Network\" (Path: \"HKCU\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"Recycle Bin\" (Path: \"HKCU\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"Control Panel\" (Path: \"HKCU\\CLSID\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"UsersFiles\" (Path: \"HKCU\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"UsersLibraries\" (Path: \"HKCU\\CLSID\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"CLSID_SearchFolder\" (Path: \"HKCU\\CLSID\\{04731B67-D933-450A-90E6-4ACD2E9408FE}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"Microsoft OneNote Namespace Extension for Windows Desktop Search\" (Path: \"HKCU\\CLSID\\{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"IE History and Feeds Shell Data Source for Windows Search\" (Path: \"HKCU\\CLSID\\{11016101-E366-4D22-BC06-4ADA335C892B}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"@%PROGRAMFILES%\\(x86)\\Microsoft Office\\Office15\\MAPISHELL.DLL,-110\" (Path: \"HKCU\\CLSID\\{138508BC-1E03-49EA-9C8F-EA9E1D05D65D}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"Public Folder\" (Path: \"HKCU\\CLSID\\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"Control Panel command object for Start menu and desktop\" (Path: \"HKCU\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"@%systemroot%\\system32\\mssvp.dll,-110\" (Path: \"HKCU\\CLSID\\{89D83576-6BD1-4C86-9454-BEB04E94C819}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"DXP\" (Path: \"HKCU\\CLSID\\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"CLSID_SearchHome\" (Path: \"HKCU\\CLSID\\{9343812E-1C37-4A49-A12E-4B2D810D956B}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"Windows Search Service Media Center Namespace Extension Handler\" (Path: \"HKCU\\CLSID\\{98D99750-0B8A-4C59-9151-589053683D73}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"Other Users Folder\" (Path: \"HKCU\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"@%systemroot%\\system32\\mssvp.dll,-112\" (Path: \"HKCU\\CLSID\\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"CLSID_StartMenuProviderFolder\" (Path: \"HKCU\\CLSID\\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched \"CLSID_StartMenuPathCompleteProviderFolder\" (Path: \"HKCU\\CLSID\\{E345F35F-9397-435C-8F95-4E922C26259E}\\SHELLFOLDER\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-67","type":9,"relevance":10,"name":"Process launched with changed environment","description":"Process \"choice.exe\" (UID: 00077726-00002508) was launched with new environment variables: \"PROMPT=\"$P$G\"\"","description_v2":["Process \"choice.exe\" (UID: 00077726-00002508) was launched with new environment variables: \"PROMPT=\"$P$G\"\""],"description_v3":[{"type":"text","value":"Process \"choice.exe\""},{"type":"process","process_uid":"00077726-00002508","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"PROMPT=\"$P$G\"\""}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-3","type":9,"relevance":5,"name":"Runs shell commands","description":"\"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe\" on 2020-6-18.17:39:45.083","description_v2":["\"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe\" on 2020-6-18.17:39:45.083"],"description_v3":[{"type":"text","value":"\"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe\" on 2020-6-18.17:39:45.083"}],"origin":"Monitored Target","attck_id":"T1059","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"Spawned process \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\" (UID: 00077708-00002636)\n Spawned process \"cmd.exe\" with commandline \"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec5 ...\" (UID: 00077721-00003580)\n Spawned process \"choice.exe\" with commandline \"choice /C Y /N /D Y /T 5\" (UID: 00077726-00002508)","description_v2":["Spawned process \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\" (UID: 00077708-00002636)","Spawned process \"cmd.exe\" with commandline \"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec5 ...\" (UID: 00077721-00003580)","Spawned process \"choice.exe\" with commandline \"choice /C Y /N /D Y /T 5\" (UID: 00077726-00002508)"],"description_v3":[{"type":"text","value":"Spawned process \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\""},{"type":"process","process_uid":"00077708-00002636","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec5 ...\""},{"type":"process","process_uid":"00077721-00003580","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"choice.exe\" with commandline \"choice /C Y /N /D Y /T 5\""},{"type":"process","process_uid":"00077726-00002508","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-103","type":9,"relevance":3,"name":"Spawns new processes that are not known child processes","description":"Spawned process \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\" (UID: 00077708-00002636)\n Spawned process \"cmd.exe\" with commandline \"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec5 ...\" (UID: 00077721-00003580)\n Spawned process \"choice.exe\" with commandline \"choice /C Y /N /D Y /T 5\" (UID: 00077726-00002508)","description_v2":["Spawned process \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\" (UID: 00077708-00002636)","Spawned process \"cmd.exe\" with commandline \"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec5 ...\" (UID: 00077721-00003580)","Spawned process \"choice.exe\" with commandline \"choice /C Y /N /D Y /T 5\" (UID: 00077726-00002508)"],"description_v3":[{"type":"text","value":"Spawned process \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\""},{"type":"process","process_uid":"00077708-00002636","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/C choice /C Y /N /D Y /T 5 & DEL C:\\06b453e6e2d5c4e767e9feaeec5 ...\""},{"type":"process","process_uid":"00077721-00003580","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"choice.exe\" with commandline \"choice /C Y /N /D Y /T 5\""},{"type":"process","process_uid":"00077726-00002508","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-16","type":6,"relevance":1,"name":"Connects to LPC ports","description":"\".exe\" connecting to \"\\ThemeApiPort\"","description_v2":["\".exe\" connecting to \"\\ThemeApiPort\""],"description_v3":[{"type":"text","value":"\".exe\" connecting to \"\\ThemeApiPort\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"$29","description_v2":["\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\clr.dll\"","\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll\"","\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll\"","\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config\"","\".exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\"","\".exe\" touched file \"C:\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\5d0c037297cc1a64b52ce43b45c2ac2e\\mscorlib.ni.dll.aux\"","\".exe\" touched file \"C:\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll.aux\"","\".exe\" touched file \"C:\\Windows\\assembly\\pubpol201.dat\"","\".exe\" touched file \"C:\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\43d86904e41b891e07c2ce8a20996e2c\\System.Windows.Forms.ni.dll.aux\"","\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll\""],"description_v3":[{"type":"text","value":"\".exe\" touched file \"%WINDIR%\\Microsoft.NET\\Framework64\\v2.0.50727\\clr.dll\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\5d0c037297cc1a64b52ce43b45c2ac2e\\mscorlib.ni.dll.aux\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll.aux\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\assembly\\pubpol201.dat\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\43d86904e41b891e07c2ce8a20996e2c\\System.Windows.Forms.ni.dll.aux\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":10,"name":"Found potential URL in binary/memory","description":"Heuristic match: \"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch\"","description_v2":["Heuristic match: \"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch\""],"description_v3":[{"type":"text","value":"Heuristic match: \"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"api-37","type":6,"relevance":10,"name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\".exe\" opened \"\\Device\\KsecDD\"\n \"vssadmin.exe\" opened \"\\Device\\KsecDD\"","description_v2":["\".exe\" opened \"\\Device\\KsecDD\"","\"vssadmin.exe\" opened \"\\Device\\KsecDD\""],"description_v3":[{"type":"text","value":"\".exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"vssadmin.exe\" opened \"\\Device\\KsecDD\""}],"origin":"API Call","attck_id":"T1215","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1215","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-18","type":0,"relevance":10,"name":"Matched Compiler/Packer signature","description":"\"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin\" was detected as \"Microsoft visual C# / Basic .NET\"","description_v2":["\"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin\" was detected as \"Microsoft visual C# / Basic .NET\""],"description_v3":[{"type":"text","value":"\"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin\" was detected as \"Microsoft visual C# / Basic .NET\""}],"origin":"Static Parser","attck_id":"T1045","capec_id":"CAPEC-570","attck_id_wiki":"https://attack.mitre.org/techniques/T1045","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Detection/Stealthyness","identifier":"api-10","type":6,"relevance":6,"name":"Queries kernel debugger information","description":"\".exe\" at 00077451-00001816-00000033-5398748512\n \"vssadmin.exe\" at 00077708-00002636-00000033-9986476343","description_v2":["\".exe\" at 00077451-00001816-00000033-5398748512","\"vssadmin.exe\" at 00077708-00002636-00000033-9986476343"],"description_v3":[{"type":"text","value":"\".exe\" at 00077451-00001816-00000033-5398748512"},{"type":"linebreak"},{"type":"text","value":"\"vssadmin.exe\" at 00077708-00002636-00000033-9986476343"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"api-1","type":6,"relevance":10,"name":"Creates guarded memory regions (anti-debugging trick to avoid memory dumping)","description":"\".exe\" is allocating memory with PAGE_GUARD access rights","description_v2":["\".exe\" is allocating memory with PAGE_GUARD access rights"],"description_v3":[{"type":"text","value":"\".exe\" is allocating memory with PAGE_GUARD access rights"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-35","type":3,"relevance":5,"name":"Reads the active computer name","description":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"vssadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","description_v2":["\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","\"vssadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"],"description_v3":[{"type":"text","value":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"},{"type":"linebreak"},{"type":"text","value":"\"vssadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-1","type":3,"relevance":10,"name":"Reads the cryptographic machine GUID","description":"\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"vssadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","description_v2":["\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","\"vssadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"],"description_v3":[{"type":"text","value":"\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"},{"type":"linebreak"},{"type":"text","value":"\"vssadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"api-24","type":6,"relevance":10,"name":"Tries to sleep for a long time (more than two minutes)","description":"\".exe\" sleeping for \"1566804069\" milliseconds","description_v2":["\".exe\" sleeping for \"1566804069\" milliseconds"],"description_v3":[{"type":"text","value":"\".exe\" sleeping for \"1566804069\" milliseconds"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-6","type":6,"relevance":4,"name":"Reads configuration files","description":"\".exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\"","description_v2":["\".exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\""],"description_v3":[{"type":"text","value":"\".exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"api-2","type":6,"relevance":8,"name":"Creates new processes","description":"\".exe\" is creating a new process (Name: \"%WINDIR%\\System32\\vssadmin.exe\", Handle: )\n \".exe\" is creating a new process (Name: \"%WINDIR%\\System32\\cmd.exe\", Handle: 1080)\n \"cmd.exe\" is creating a new process (Name: \"%WINDIR%\\System32\\choice.exe\", Handle: 88)","description_v2":["\".exe\" is creating a new process (Name: \"%WINDIR%\\System32\\vssadmin.exe\", Handle: )","\".exe\" is creating a new process (Name: \"%WINDIR%\\System32\\cmd.exe\", Handle: 1080)","\"cmd.exe\" is creating a new process (Name: \"%WINDIR%\\System32\\choice.exe\", Handle: 88)"],"description_v3":[{"type":"text","value":"\".exe\" is creating a new process (Name: \"%WINDIR%\\System32\\vssadmin.exe\", Handle: )"},{"type":"linebreak"},{"type":"text","value":"\".exe\" is creating a new process (Name: \"%WINDIR%\\System32\\cmd.exe\", Handle: 1080)"},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" is creating a new process (Name: \"%WINDIR%\\System32\\choice.exe\", Handle: 88)"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Ransomware/Banking","identifier":"string-52","type":2,"relevance":10,"name":"Contains many references to file extensions (often found in ransomware)","description":"Found reference to a lot of file extensions: .vhd\n .vhdx\n .backup\n .edb\n .accdb\n .frm\n .mdb\n .qbb\n .html\n .pst\n .qbw\n .nd\n .qbm\n .qbx\n .qba\n .tlg\n .7z\n .rar\n .m4a\n .wma\n .avi\n .wmv\n .csv\n .d3dbsp\n .sc2save\n .sie\n .sum\n .ibank\n .t13\n .t12\n .qdf\n .gdb\n .tax\n .pkpass\n .bc6\n .bc7\n .bkp\n .qic\n .bkf\n .sidn\n .sidd\n .mddata\n .itl\n .itdb\n .icxs\n .hvpl\n .hplg\n .hkdb\n .mdbackup\n .syncdb\n .gho\n .cas\n .svg\n .map\n .wmo\n .itm\n .sb\n .fos\n .mcgame\n .vdf\n .ztmp\n .sis\n .sid\n .ncf\n .menu","description_v2":["Found reference to a lot of file extensions: .vhd",".vhdx",".backup",".edb",".accdb",".frm",".mdb",".qbb",".html",".pst",".qbw",".nd",".qbm",".qbx",".qba",".tlg",".7z",".rar",".m4a",".wma",".avi",".wmv",".csv",".d3dbsp",".sc2save",".sie",".sum",".ibank",".t13",".t12",".qdf",".gdb",".tax",".pkpass",".bc6",".bc7",".bkp",".qic",".bkf",".sidn",".sidd",".mddata",".itl",".itdb",".icxs",".hvpl",".hplg",".hkdb",".mdbackup",".syncdb",".gho",".cas",".svg",".map",".wmo",".itm",".sb",".fos",".mcgame",".vdf",".ztmp",".sis",".sid",".ncf",".menu"],"description_v3":[{"type":"text","value":"Found reference to a lot of file extensions: .vhd"},{"type":"linebreak"},{"type":"text","value":".vhdx"},{"type":"linebreak"},{"type":"text","value":".backup"},{"type":"linebreak"},{"type":"text","value":".edb"},{"type":"linebreak"},{"type":"text","value":".accdb"},{"type":"linebreak"},{"type":"text","value":".frm"},{"type":"linebreak"},{"type":"text","value":".mdb"},{"type":"linebreak"},{"type":"text","value":".qbb"},{"type":"linebreak"},{"type":"text","value":".html"},{"type":"linebreak"},{"type":"text","value":".pst"},{"type":"linebreak"},{"type":"text","value":".qbw"},{"type":"linebreak"},{"type":"text","value":".nd"},{"type":"linebreak"},{"type":"text","value":".qbm"},{"type":"linebreak"},{"type":"text","value":".qbx"},{"type":"linebreak"},{"type":"text","value":".qba"},{"type":"linebreak"},{"type":"text","value":".tlg"},{"type":"linebreak"},{"type":"text","value":".7z"},{"type":"linebreak"},{"type":"text","value":".rar"},{"type":"linebreak"},{"type":"text","value":".m4a"},{"type":"linebreak"},{"type":"text","value":".wma"},{"type":"linebreak"},{"type":"text","value":".avi"},{"type":"linebreak"},{"type":"text","value":".wmv"},{"type":"linebreak"},{"type":"text","value":".csv"},{"type":"linebreak"},{"type":"text","value":".d3dbsp"},{"type":"linebreak"},{"type":"text","value":".sc2save"},{"type":"linebreak"},{"type":"text","value":".sie"},{"type":"linebreak"},{"type":"text","value":".sum"},{"type":"linebreak"},{"type":"text","value":".ibank"},{"type":"linebreak"},{"type":"text","value":".t13"},{"type":"linebreak"},{"type":"text","value":".t12"},{"type":"linebreak"},{"type":"text","value":".qdf"},{"type":"linebreak"},{"type":"text","value":".gdb"},{"type":"linebreak"},{"type":"text","value":".tax"},{"type":"linebreak"},{"type":"text","value":".pkpass"},{"type":"linebreak"},{"type":"text","value":".bc6"},{"type":"linebreak"},{"type":"text","value":".bc7"},{"type":"linebreak"},{"type":"text","value":".bkp"},{"type":"linebreak"},{"type":"text","value":".qic"},{"type":"linebreak"},{"type":"text","value":".bkf"},{"type":"linebreak"},{"type":"text","value":".sidn"},{"type":"linebreak"},{"type":"text","value":".sidd"},{"type":"linebreak"},{"type":"text","value":".mddata"},{"type":"linebreak"},{"type":"text","value":".itl"},{"type":"linebreak"},{"type":"text","value":".itdb"},{"type":"linebreak"},{"type":"text","value":".icxs"},{"type":"linebreak"},{"type":"text","value":".hvpl"},{"type":"linebreak"},{"type":"text","value":".hplg"},{"type":"linebreak"},{"type":"text","value":".hkdb"},{"type":"linebreak"},{"type":"text","value":".mdbackup"},{"type":"linebreak"},{"type":"text","value":".syncdb"},{"type":"linebreak"},{"type":"text","value":".gho"},{"type":"linebreak"},{"type":"text","value":".cas"},{"type":"linebreak"},{"type":"text","value":".svg"},{"type":"linebreak"},{"type":"text","value":".map"},{"type":"linebreak"},{"type":"text","value":".wmo"},{"type":"linebreak"},{"type":"text","value":".itm"},{"type":"linebreak"},{"type":"text","value":".sb"},{"type":"linebreak"},{"type":"text","value":".fos"},{"type":"linebreak"},{"type":"text","value":".mcgame"},{"type":"linebreak"},{"type":"text","value":".vdf"},{"type":"linebreak"},{"type":"text","value":".ztmp"},{"type":"linebreak"},{"type":"text","value":".sis"},{"type":"linebreak"},{"type":"text","value":".sid"},{"type":"linebreak"},{"type":"text","value":".ncf"},{"type":"linebreak"},{"type":"text","value":".menu"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Ransomware/Banking","identifier":"string-13","type":2,"relevance":7,"name":"Detected indicator that file is ransomware","description":"\"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch\" (Source: 06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin, Indicator: \"files are encrypted\")\n \"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch \\r\\n\\r\\n\\r\\n\" (Source: 6000010-Form1~messageCreator, Indicator: \"files are encrypted\")\n \"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch \n\n\n208,228,40,44,35,76,39,231,163,209,178,23,91,251,35,213,67,166,188,97,246,163,31,71,18,14,137,107,182,71,224,120,33,204,180,68,155,240,196,175,119,150,215,185\" (Source: 00077451-00001816-00000005-9816164567, Indicator: \"files are encrypted\")","description_v2":["\"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch\" (Source: 06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin, Indicator: \"files are encrypted\")","\"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch \\r\\n\\r\\n\\r\\n\" (Source: 6000010-Form1~messageCreator, Indicator: \"files are encrypted\")","\"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch","","","208,228,40,44,35,76,39,231,163,209,178,23,91,251,35,213,67,166,188,97,246,163,31,71,18,14,137,107,182,71,224,120,33,204,180,68,155,240,196,175,119,150,215,185\" (Source: 00077451-00001816-00000005-9816164567, Indicator: \"files are encrypted\")"],"description_v3":[{"type":"text","value":"\"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch\" (Source: 06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin, Indicator: \"files are encrypted\")"},{"type":"linebreak"},{"type":"text","value":"\"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch \\r\\n\\r\\n\\r\\n\" (Source: 6000010-Form1~messageCreator, Indicator: \"files are encrypted\")"},{"type":"linebreak"},{"type":"text","value":"\"All of your files are encrypted, to decrypt them write us to email: Datauser17234@protonmail.ch"},{"type":"linebreak"},{"type":"linebreak"},{"type":"linebreak"},{"type":"text","value":"208,228,40,44,35,76,39,231,163,209,178,23,91,251,35,213,67,166,188,97,246,163,31,71,18,14,137,107,182,71,224,120,33,204,180,68,155,240,196,175,119,150,215,185\" (Source: 00077451-00001816-00000005-9816164567, Indicator: \"files are encrypted\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Security","identifier":"registry-27","type":3,"relevance":10,"name":"Modifies proxy settings","description":"\".exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \".exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","description_v2":["\".exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","\".exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")"],"description_v3":[{"type":"text","value":"\".exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")"}],"origin":"Registry Access","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1112","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Security","identifier":"registry-36","type":3,"relevance":8,"name":"Queries sensitive IE security settings","description":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")","description_v2":["\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")"],"description_v3":[{"type":"text","value":"\".exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"hooks-8","type":11,"relevance":10,"name":"Installs hooks/patches the running process","description":"$2a","description_v2":["\".exe\" wrote bytes \"48b8e011b3f5fe070000ffe0\" to virtual address \"0xFE061000\" (part of module \"WS2_32.DLL\")","\".exe\" wrote bytes \"40130000\" to virtual address \"0xFCC08478\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB25EB\" (part of module \"CLR.DLL\")","\".exe\" wrote bytes \"00100000\" to virtual address \"0xFE091748\" (part of module \"WS2_32.DLL\")","\".exe\" wrote bytes \"00100000\" to virtual address \"0xFCC085A4\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB264E\" (part of module \"CLR.DLL\")","\".exe\" wrote bytes \"48b81016b3f5fe070000ffe0\" to virtual address \"0xFCBF1000\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"00100000\" to virtual address \"0xFCC08468\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB2570\" (part of module \"CLR.DLL\")","\".exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF0FB2B83\" (part of module \"CLR.DLL\")","\".exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF0FB2BC0\" (part of module \"CLR.DLL\")","\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB2533\" (part of module \"CLR.DLL\")","\".exe\" wrote bytes \"40130000\" to virtual address \"0xFCC08538\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB28CA\" (part of module \"CLR.DLL\")","\".exe\" wrote bytes \"48b86013b3f5fe070000ffe0\" to virtual address \"0xFCBF1340\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"0010bffcfe070000\" to virtual address \"0xFCC0FB18\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"4013bffcfe070000\" to virtual address \"0xFCC0FE48\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF0FB2CCB\" (part of module \"CLR.DLL\")","\".exe\" wrote bytes \"0010bffcfe070000\" to virtual address \"0xFCC0FB50\" (part of module \"SSPICLI.DLL\")","\".exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF0FB2C8B\" (part of module \"CLR.DLL\")"],"description_v3":[{"type":"text","value":"\".exe\" wrote bytes \"48b8e011b3f5fe070000ffe0\" to virtual address \"0xFE061000\" (part of module \"WS2_32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"40130000\" to virtual address \"0xFCC08478\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB25EB\" (part of module \"CLR.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"00100000\" to virtual address \"0xFE091748\" (part of module \"WS2_32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"00100000\" to virtual address \"0xFCC085A4\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB264E\" (part of module \"CLR.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"48b81016b3f5fe070000ffe0\" to virtual address \"0xFCBF1000\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"00100000\" to virtual address \"0xFCC08468\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB2570\" (part of module \"CLR.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF0FB2B83\" (part of module \"CLR.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF0FB2BC0\" (part of module \"CLR.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB2533\" (part of module \"CLR.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"40130000\" to virtual address \"0xFCC08538\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF0FB28CA\" (part of module \"CLR.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"48b86013b3f5fe070000ffe0\" to virtual address \"0xFCBF1340\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"0010bffcfe070000\" to virtual address \"0xFCC0FB18\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"4013bffcfe070000\" to virtual address \"0xFCC0FE48\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF0FB2CCB\" (part of module \"CLR.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"0010bffcfe070000\" to virtual address \"0xFCC0FB50\" (part of module \"SSPICLI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF0FB2C8B\" (part of module \"CLR.DLL\")"}],"origin":"Hook Detection","attck_id":"T1179","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1179","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"registry-25","type":3,"relevance":3,"name":"Reads information about supported languages","description":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","description_v2":["\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"],"description_v3":[{"type":"text","value":"\".exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-3","type":12,"relevance":10,"name":"Sample was identified as malicious by a large number of Antivirus engines","description":"29/72 Antivirus vendors marked sample as malicious (40% detection rate)","description_v2":["29/72 Antivirus vendors marked sample as malicious (40% detection rate)"],"description_v3":[{"type":"text","value":"29/72 Antivirus vendors marked sample as malicious (40% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-0","type":12,"relevance":8,"name":"Sample was identified as malicious by at least one Antivirus engine","description":"29/72 Antivirus vendors marked sample as malicious (40% detection rate)","description_v2":["29/72 Antivirus vendors marked sample as malicious (40% detection rate)"],"description_v3":[{"type":"text","value":"29/72 Antivirus vendors marked sample as malicious (40% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistance","identifier":"api-0","type":6,"relevance":6,"name":"Writes data to a remote process","description":"\".exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)\n \".exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)\n \".exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)\n \"cmd.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)\n \"cmd.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)\n \"cmd.exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)","description_v2":["\".exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)","\".exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)","\".exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)","\"cmd.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)","\"cmd.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)","\"cmd.exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)"],"description_v3":[{"type":"text","value":"\".exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)"},{"type":"linebreak"},{"type":"text","value":"\".exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\vssadmin.exe\" (Handle: 1000)"},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)"},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)"},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\choice.exe\" (Handle: 88)"}],"origin":"API Call","attck_id":"T1055","capec_id":"CAPEC-242","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Ransomware/Banking","identifier":"target-4","type":9,"relevance":10,"name":"Deletes volume snapshots (often used by ransomware)","description":"Deletes volume snapshots files \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\" (UID: 00077708-00002636)","description_v2":["Deletes volume snapshots files \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\" (UID: 00077708-00002636)"],"description_v3":[{"type":"text","value":"Deletes volume snapshots files \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\""},{"type":"process","process_uid":"00077708-00002636","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1107","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1107","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"System Destruction","identifier":"target-4","type":9,"relevance":10,"name":"Deletes volume snapshots (often used by ransomware)","description":"Deletes volume snapshots files \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\" (UID: 00077708-00002636)","description_v2":["Deletes volume snapshots files \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\" (UID: 00077708-00002636)"],"description_v3":[{"type":"text","value":"Deletes volume snapshots files \"vssadmin.exe\" with commandline \"delete shadows /all /quiet\""},{"type":"process","process_uid":"00077708-00002636","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1107","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1107","stream_data":null}],"detonation_parameters":{"action_script":"default","experimental_anti_evasion":true,"script_logging":false,"allow_sample_tampering":false,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":180,"comment":"DeathHiddenTear"},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default.au3","monitor_script_description":"Default analysis","windows_version_name":"Windows 7","windows_version_edition":"Professional","windows_version_service_pack":"Service Pack 1","windows_version_version":"6.1 (build 7601)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"8.31","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Ransomware","details":["Detected indicator that file is ransomware","Deletes volume snapshots (often used by ransomware)"]},{"name":"Spyware","details":["Deletes volume snapshots (often used by ransomware)"]},{"name":"Persistence","details":["Writes data to a remote process"]},{"name":"Fingerprint","details":["Queries kernel debugger information","Reads the cryptographic machine GUID","Reads the active computer name","Queries sensitive IE security settings"]},{"name":"Evasive","details":["Tries to sleep for a long time (more than two minutes)"]}],"icon":"$2b","visualization":"$2c","classification":["62.0% (.EXE) Generic CIL Executable (.NET, Mono, etc.)","23.4% (.EXE) Win64 Executable (generic)","5.5% (.DLL) Win32 Dynamic Link Library (generic)","3.8% (.EXE) Win32 Executable (generic)","1.7% (.EXE) OS/2 Executable (generic)"],"dns_requests":[],"contacted_hosts":[],"contacted_countries":{"countries":[],"coordinates":[]},"port_infos":[],"extracted_strings":{"all":[{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"JGE2M2E4N2Y1LWM4NDItNDgwNC1hODJmLTI2ZDJlNzA3YmFjZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkAlc3lzdGVtcm9vdCVcc3lzdGVtMzJcbXNzdnAuZGxsLC0xMTAiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkAlc3lzdGVtcm9vdCVcc3lzdGVtMzJcbXNzdnAuZGxsLC0xMTIiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkAlUFJPR1JBTUZJTEVTJVwoeDg2KVxNaWNyb3NvZnQgT2ZmaWNlXE9mZmljZTE1XE1BUElTSEVMTC5ETEwsLTExMCIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1NlYXJjaEZvbGRlciIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1NlYXJjaEhvbWUiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1N0YXJ0TWVudVBhdGhDb21wbGV0ZVByb3ZpZGVyRm9sZGVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1N0YXJ0TWVudVByb3ZpZGVyRm9sZGVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVycyBhbmQgRGV2aWNlcyIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbnRyb2wgUGFuZWwgY29tbWFuZCBvYmplY3QgZm9yIFN0YXJ0IG1lbnUgYW5kIGRlc2t0b3AiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbnRyb2wgUGFuZWwiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkRYUCIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkdhbWVzIEV4cGxvcmVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IklFIEhpc3RvcnkgYW5kIEZlZWRzIFNoZWxsIERhdGEgU291cmNlIGZvciBXaW5kb3dzIFNlYXJjaCIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6Ik1pY3Jvc29mdCBPbmVOb3RlIE5hbWVzcGFjZSBFeHRlbnNpb24gZm9yIFdpbmRvd3MgRGVza3RvcCBTZWFyY2giJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6Ik5ldHdvcmsiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6Ik90aGVyIFVzZXJzIEZvbGRlciIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlB1YmxpYyBGb2xkZXIiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlJlY3ljbGUgQmluIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlN0aWNreSBOb3RlcyBOYW1lc3BhY2UgRXh0ZW5zaW9uIGZvciBXaW5kb3dzIERlc2t0b3AgU2VhcmNoIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlVzZXJzRmlsZXMiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlVzZXJzTGlicmFyaWVzIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IldpbmRvd3MgU2VhcmNoIFNlcnZpY2UgTWVkaWEgQ2VudGVyIE5hbWVzcGFjZSBFeHRlbnNpb24gSGFuZGxlciIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"LkRheVpQcm9maWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"LmxpdGVtb2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lm1kYmFja3Vw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lm1lbnU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk5FVCBGcmFtZXdvcmsgNC41","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk5FVEZyYW1ld29yayxWZXJzaW9uPXY0LjU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"LnVuaXR5M2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"LndvdHJlcGxheQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCA1ICYgREVM","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCA1ICYgREVMIEM6XDA2YjQ1M2U2ZTJkNWM0ZTc2N2U5ZmVhZWVjNTQwNjFmODA3MWRmMDZhNTNmZGIzNDRlNTJhN2IxNTlkZGM1YzQuZXhl","type":"Ansi","source":"Process Commandline","process":null,"filename":"cmd.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDZiNDUzZTZlMmQ1YzRlNzY3ZTlmZWFlZWM1NDA2MWY4MDcxZGYwNmE1M2ZkYjM0NGU1MmE3YjE1OWRkYzVjNC5leGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MjA4MUZCNUQ=","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"M1N5c3RlbS5SZXNvdXJjZXMuVG9vbHMuU3Ryb25nbHlUeXBlZFJlc291cmNlQnVpbGRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"PD5jX19EaXNwbGF5Q2xhc3MxMV8w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGVuY3J5cHREaXJlY3Rvcnk+Yl9fMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFxEZWNyeXB0IEluc3RydWN0aW9ucy50eHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRTJDLS0yMDE5MjI5NTM2MTg4NDc0NDkwNi04MjQyMTM1NzctMzM0MDU2MjQ5LTU1NDYxOTY5Ni0xOTA1OTYwNzU3MTQwMjU5NjQyNTEwMDcyOTA0NQ==","type":"Unicode","source":"Runtime Data","process":"choice.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRjk0LS01MTEzMzU1MDQxMjY2Mzg2OTA5MTYyMzA1ODc4NS0xMzIzMDAxMjMzMTY1ODU3NTA5OC04ODk2MjUzMzYxODEwOTc5NzAwLTkwNTA2MzQ2","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Xz9fX19fX18wXz9sX19sX19fX19fcV9fPz9fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X0NvckV4ZU1haW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2VuY3JwdGVkQ29tcHV0ZXJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"X3B1YmxpY0tleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXpBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWjEyMzQ1Njc4OTAhQCMkJV4mKigpLV89Kzw+Liw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkck9mUGlubmVkT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRtaW5UYWJQcm9jcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":0,"total":79},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2ggMjA4LDIyOCw0MCw0NCwzNSw3NiwzOSwyMzEsMTYzLDIwOSwxNzgsMjMsOTEsMjUxLDM1LDIxMyw2NywxNjYsMTg4LDk3LDI0NiwxNjMsMzEsNzEsMTgsMTQsMTM3LDEwNywxODIsNzEsMjI0LDEyMCwzMywyMDQsMTgwLDY4LDE1NSwyNDAsMTk2LDE3NSwxMTksMTUwLDIxNSwxODU=","type":"Ansi","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2ggXHJcblxyXG5cclxu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dlZFJlc2VydmVkQ2hhcmFjdGVycw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dGaWxlQ0xTSURKdW5jdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzU2hvd0V4dA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb25TZXR0aW5nc0Jhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHkgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb21wYW55QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb25maWd1cmF0aW9uQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb3B5cmlnaHRBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlEZXNjcmlwdGlvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlGaWxlVmVyc2lvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlQcm9kdWN0QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlUaXRsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlUcmFkZW1hcmtBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXN5bW1ldHJpY0FsZ29yaXRobQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0NoZWNrU2VsZWN0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0RldGVjdA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnJvd3NlSW5QbGFjZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QzpcJFJlY3ljbGUuQmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcXCRSZWN5Y2xlLkJpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcXFVzZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcXFdpbmRvd3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVVTRVJQUk9GSUxFJVxEZXNrdG9wXE1vdmVcVmVyc2lvbnNcZW5jIC0gcGFyYVxEZWF0aFYyIC0gRmlsZXN0cmVhbSBWZXJzaW9uXERlYXRoXG9ialxSZWxlYXNlXHNzdmNob3N0LnBkYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcV2luZG93cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVMb2NhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbEZvckF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2hvaWNlICAvQyBZIC9OIC9EIFkgL1QgNQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"choice.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2lwaGVyTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3NpY1NoZWxs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0xSTG9hZExvZ0Rpcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsYXRpb25SZWxheGF0aW9uc0F0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsZXJHZW5lcmF0ZWRBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcG9uZW50cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcHV0ZXJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tVmlzaWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFpbmVyQ29udHJvbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudCBUeXBl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29weXJpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRW5jcnlwdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUGFzc3dvcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVXJpQ2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvU3RyZWFt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvU3RyZWFtTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VsdHVyZUluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGJnSklURGVidWdMYXVuY2hTZXR0aW5n","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGJnTWFuYWdlZERlYnVnZ2Vy","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVhdGguRm9ybTEucmVzb3VyY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnYWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnZXJOb25Vc2VyQ29kZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnaW5nTW9kZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmYXVsdEluc3RhbmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZWdhdGVFeGVjdXRl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGVsZXRlIHNoYWRvd3MgL2FsbCAvcXVpZXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzdGluYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2T3ZlcnJpZGVFbmFibGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNvbmZpZ0NhY2hl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVuZ2luZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1TSVBlZWs=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNlY3VyaXR5U2V0dGluZ3NDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWxsb3dSdW4=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGlzcG9zaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFByZXR0eVBhdGg=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFNob3dTdXBlckhpZGRlbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRDYWNoZVF1b3RhSW5LQg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJpdmVNYXNr","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RWRpdG9yQnJvd3NhYmxlQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RWRpdG9yQnJvd3NhYmxlU3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTG9n","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUHVueWNvZGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU2hlbGxFeGVjdXRlSG9va3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlVmlzdWFsU3R5bGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jcnlwdERpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdFJTQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bWVyYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW52aXJvbm1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXZlbnRBcmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXZlbnRIYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmVhdHVyZVNJTUQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZURlc2NyaXB0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUVuY3J5cHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUluVXNlTWlsbGlzZWNvbmRzQmV0d2VlblJldHJpZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUluVXNlUmV0cnlBdHRlbXB0cw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVN0cmVhbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlyc3RSdW5Db21wbGV0ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9udENhY2hlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybTFfTG9hZF8x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWV3b3JrRGlzcGxheU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJvbVhtbFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0NIYW5kbGVUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGVkQ29kZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGVSYW5kb21TYWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Fzc2VtYmx5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0NoYXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0N1bHR1cmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0RlZmF1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0V4ZWN1dGFibGVQYXRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0xlbmd0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X01hY2hpbmVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X1Jlc291cmNlTWFuYWdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlyZWN0b3JpZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXh0ZW5zaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9naWNhbERyaXZlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VHlwZUZyb21IYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2Vzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R3VpZEF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGFzTmF2aWdhdGlvbkVudW0=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZpbGVFeHQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZvbGRlclZlcmJz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUljb25z","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUluV2ViVmlldw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZU9uRGVza3RvcFBlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlsbENsaW1iaW5nX1RhcmdldFNpZ25hbFRvTm9pc2VSYXRpbw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SWNvbnNPbmx5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUNvbnRhaW5lcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUNyeXB0b1RyYW5zZm9ybQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SURpc3Bvc2FibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUVudW1lcmFibGVgMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXgyMDE=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5oZXJpdENvbnNvbGVIYW5kbGVz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNvbXBvbmVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aW5wdXRGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFJvb3Q=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuYWxOYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50cmFuZXROYW1l","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVB2NExvb3BiYWNrQWx0ZXJuYXRpdmU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SXNTaG9ydGN1dA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"S01pY3Jvc29mdC5WaXN1YWxTdHVkaW8uRWRpdG9ycy5TZXR0aW5nc0Rlc2lnbmVyLlNldHRpbmdzU2luZ2xlRmlsZUdlbmVyYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGRhcENsaWVudEludGVncml0eQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5UG9saWN5VGltZVN0YW1w","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxDb3B5cmlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxUcmFkZW1hcmtz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFdpdGhvdXRDT00=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nRmFpbHVyZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nZ2luZ0xldmVs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nUmVzb3VyY2VCaW5kcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bFN5c3RlbS5SZXNvdXJjZXMuUmVzb3VyY2VSZWFkZXIsIG1zY29ybGliLCBWZXJzaW9uPTQuMC4wLjAsIEN1bHR1cmU9bmV1dHJhbCwgUHVibGljS2V5VG9rZW49Yjc3YTVjNTYxOTM0ZTA4OSNTeXN0ZW0uUmVzb3VyY2VzLlJ1bnRpbWVSZXNvdXJjZVNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVRocm90dGxpbmc=","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJpdmVWZXJicw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJ2QnRu","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFydGFFeHRlbnNpb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW1pemVBcHBz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW11bUFsbG93ZWRBbGxvY2F0aW9uU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWVzc2FnZUNyZWF0b3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IDIwMTg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZWkuZGxs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV2ZXJEZWZhdWx0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV2ZXJTaG93RXh0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9DbGllbnRDaGVja3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db250cm9sUGFuZWw=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9GaWxlRm9sZGVySnVuY3Rpb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9JbnRlcm5ldEljb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9OZXRDcmF3bGluZw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TZXRGb2xkZXJz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TaW1wbGVTdGFydE1lbnU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TdGF0aWNEZWZhdWx0VmVyYg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9XZWJWaWV3","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Xb3JraW5nRGlyZWN0b3J5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T25seVVzZUxhdGVzdENMUg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"b3BfRXF1YWxpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW1pemVVc2VkQmluYXJpZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3JpZ2luYWxGaWxlbmFtZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFkZGluZ01vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyYWxsZWxMb29wUmVzdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGluVG9OYW1lU3BhY2VUcmVl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvIERlY3J5cHRpb24gS2V5Og==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc0RpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc0RpcmVjdG9yeUM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1N0YXJ0SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1dpbmRvd1N0eWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdE5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlCeXBhc3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmFuZG9tTnVtYmVyR2VuZXJhdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cmVzb3VyY2VDdWx0dXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzb3VyY2VNYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RlZEF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RSdW4=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdW1lTGF5b3V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmZjMjg5OERlcml2ZUJ5dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmlqbmRhZWxNYW5hZ2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Uk5HQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsWmVyb01lbW9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZUNvbXBhdGliaWxpdHlBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZVR5cGVIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHlfSEtMTV9vbmx5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VwYXJhdGVQcm9jZXNz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbk1lcmdpbmc=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0FyZ3VtZW50cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0F1dG9TY2FsZURpbWVuc2lvbnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0F1dG9TY2FsZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0NsaWVudFNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0NyZWF0ZU5vV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0N1bHR1cmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0ZpbGVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X09wYWNpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X1BhZGRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X1Nob3dJblRhc2tiYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X1dpbmRvd1N0eWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q29tcGF0aWJsZVRleHRSZW5kZXJpbmdEZWZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V29ya2luZ0RpcmVjdG9yeUZyb21UYXJnZXQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxTdGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbXBDb2xvcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0luZm9UaXA=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1N1cGVySGlkZGVu","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1R5cGVPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2lhbEZvbGRlcnNDYWNoZVNpemU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuZXhl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuUHJvcGVydGllcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuUHJvcGVydGllcy5SZXNvdXJjZXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuUHJvcGVydGllcy5SZXNvdXJjZXMucmVzb3VyY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3RhcnRBY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1RBVGhyZWFkQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nQnVpbGRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3VwcHJlc3Npb25Qb2xpY3k=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3VzcGVuZExheW91dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3ltbWV0cmljQWxnb3JpdGht","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY2hyb25pemVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvZGVEb20uQ29tcGlsZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbGxlY3Rpb25zLkdlbmVyaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbXBvbmVudE1vZGVs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbmZpZ3VyYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkRpYWdub3N0aWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkRyYXdpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkdsb2JhbGl6YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLklP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkxpbnE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJlZmxlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJlc291cmNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJTZXJ2aWNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuSW50ZXJvcFNlcnZpY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuVmVyc2lvbmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlRleHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlRocmVhZGluZy5UYXNrcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLldpbmRvd3MuRm9ybXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtMzI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFiUHJvY0dyb3d0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGFyZ2V0RGlyZWN0b3J5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGFyZ2V0RnJhbWV3b3JrQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VU5DQXNJbnRyYW5ldA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VW5pY29kZUVuY29kaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXNlRHJvcEhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSG9zdG5hbWVBc0FsaWFz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlTGVnYWN5SWRlbnRpdHlGb3JtYXQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlTGVnYWN5VjJSdW50aW1lQWN0aXZhdGlvblBvbGljeURlZmF1bHRWYWx1ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlT2xkSG9zdFJlc29sdXRpb25PcmRlcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlUnl1SklU","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"djQuMC4zMDMxOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmFsaWRFeHRlbnNpb25z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"dnNzYWRtaW4uZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNBbGlhc2VkTm90aWZpY2F0aW9ucw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JESVNQTEFZ","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JQQVJTSU5H","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNQYXJzZURpc3BsYXlOYW1l","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNVbml2ZXJzYWxEZWxlZ2F0ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3JhcE5vbkV4Y2VwdGlvblRocm93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVBbGxMaW5lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ezFCM0VBNURDLUI1ODctNDc4Ni1CNEVGLUJEMURDMzMyQUVBRX0=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezQ1MEQ4RkJBLUFEMjUtMTFEMC05OEE4LTA4MDAzNjFCMTEwM30=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezg3MUM1MzgwLTQyQTAtMTA2OS1BMkVBLTA4MDAyQjMwMzA5RH0=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezg3MUM1MzgwLTQyQTAtMTA2OS1BMkVBLTA4MDAyQjMwMzA5RH0gJUdVSUQ6IklTaGVsbEZvbGRlciIlIDB4RkZGRg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"JGE2M2E4N2Y1LWM4NDItNDgwNC1hODJmLTI2ZDJlNzA3YmFjZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkAlc3lzdGVtcm9vdCVcc3lzdGVtMzJcbXNzdnAuZGxsLC0xMTAiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkAlc3lzdGVtcm9vdCVcc3lzdGVtMzJcbXNzdnAuZGxsLC0xMTIiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkAlUFJPR1JBTUZJTEVTJVwoeDg2KVxNaWNyb3NvZnQgT2ZmaWNlXE9mZmljZTE1XE1BUElTSEVMTC5ETEwsLTExMCIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1N0YXJ0TWVudVBhdGhDb21wbGV0ZVByb3ZpZGVyRm9sZGVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVycyBhbmQgRGV2aWNlcyIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbnRyb2wgUGFuZWwgY29tbWFuZCBvYmplY3QgZm9yIFN0YXJ0IG1lbnUgYW5kIGRlc2t0b3AiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlJlY3ljbGUgQmluIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IldpbmRvd3MgU2VhcmNoIFNlcnZpY2UgTWVkaWEgQ2VudGVyIE5hbWVzcGFjZSBFeHRlbnNpb24gSGFuZGxlciIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Lm1lbnU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk5FVCBGcmFtZXdvcmsgNC41","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk5FVEZyYW1ld29yayxWZXJzaW9uPXY0LjU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCA1ICYgREVM","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCA1ICYgREVMIEM6XDA2YjQ1M2U2ZTJkNWM0ZTc2N2U5ZmVhZWVjNTQwNjFmODA3MWRmMDZhNTNmZGIzNDRlNTJhN2IxNTlkZGM1YzQuZXhl","type":"Ansi","source":"Process Commandline","process":null,"filename":"cmd.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDZiNDUzZTZlMmQ1YzRlNzY3ZTlmZWFlZWM1NDA2MWY4MDcxZGYwNmE1M2ZkYjM0NGU1MmE3YjE1OWRkYzVjNC5leGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFxEZWNyeXB0IEluc3RydWN0aW9ucy50eHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRTJDLS0yMDE5MjI5NTM2MTg4NDc0NDkwNi04MjQyMTM1NzctMzM0MDU2MjQ5LTU1NDYxOTY5Ni0xOTA1OTYwNzU3MTQwMjU5NjQyNTEwMDcyOTA0NQ==","type":"Unicode","source":"Runtime Data","process":"choice.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRjk0LS01MTEzMzU1MDQxMjY2Mzg2OTA5MTYyMzA1ODc4NS0xMzIzMDAxMjMzMTY1ODU3NTA5OC04ODk2MjUzMzYxODEwOTc5NzAwLTkwNTA2MzQ2","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"X0NvckV4ZU1haW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2VuY3JwdGVkQ29tcHV0ZXJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"X3B1YmxpY0tleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":0,"total":79},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2ggMjA4LDIyOCw0MCw0NCwzNSw3NiwzOSwyMzEsMTYzLDIwOSwxNzgsMjMsOTEsMjUxLDM1LDIxMyw2NywxNjYsMTg4LDk3LDI0NiwxNjMsMzEsNzEsMTgsMTQsMTM3LDEwNywxODIsNzEsMjI0LDEyMCwzMywyMDQsMTgwLDY4LDE1NSwyNDAsMTk2LDE3NSwxMTksMTUwLDIxNSwxODU=","type":"Ansi","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2ggXHJcblxyXG5cclxu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHkgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb21wYW55QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlEZXNjcmlwdGlvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlGaWxlVmVyc2lvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcJFJlY3ljbGUuQmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcXCRSZWN5Y2xlLkJpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVVTRVJQUk9GSUxFJVxEZXNrdG9wXE1vdmVcVmVyc2lvbnNcZW5jIC0gcGFyYVxEZWF0aFYyIC0gRmlsZXN0cmVhbSBWZXJzaW9uXERlYXRoXG9ialxSZWxlYXNlXHNzdmNob3N0LnBkYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hvaWNlICAvQyBZIC9OIC9EIFkgL1QgNQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"choice.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsYXRpb25SZWxheGF0aW9uc0F0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsZXJHZW5lcmF0ZWRBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcG9uZW50cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcHV0ZXJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tVmlzaWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VsdHVyZUluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmYXVsdEluc3RhbmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZWdhdGVFeGVjdXRl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1TSVBlZWs=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU2hlbGxFeGVjdXRlSG9va3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlVmlzdWFsU3R5bGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXZlbnRBcmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZURlc2NyaXB0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rmlyc3RSdW5Db21wbGV0ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWV3b3JrRGlzcGxheU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Fzc2VtYmx5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0NoYXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0N1bHR1cmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0RlZmF1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0V4ZWN1dGFibGVQYXRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0xlbmd0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X01hY2hpbmVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X1Jlc291cmNlTWFuYWdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlyZWN0b3JpZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXh0ZW5zaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9naWNhbERyaXZlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VHlwZUZyb21IYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGlsbENsaW1iaW5nX1RhcmdldFNpZ25hbFRvTm9pc2VSYXRpbw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNvbXBvbmVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFJvb3Q=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S01pY3Jvc29mdC5WaXN1YWxTdHVkaW8uRWRpdG9ycy5TZXR0aW5nc0Rlc2lnbmVyLlNldHRpbmdzU2luZ2xlRmlsZUdlbmVyYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFdpdGhvdXRDT00=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nRmFpbHVyZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nUmVzb3VyY2VCaW5kcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bFN5c3RlbS5SZXNvdXJjZXMuUmVzb3VyY2VSZWFkZXIsIG1zY29ybGliLCBWZXJzaW9uPTQuMC4wLjAsIEN1bHR1cmU9bmV1dHJhbCwgUHVibGljS2V5VG9rZW49Yjc3YTVjNTYxOTM0ZTA4OSNTeXN0ZW0uUmVzb3VyY2VzLlJ1bnRpbWVSZXNvdXJjZVNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZWkuZGxs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW1pemVVc2VkQmluYXJpZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvIERlY3J5cHRpb24gS2V5Og==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc0RpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc0RpcmVjdG9yeUM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1N0YXJ0SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1dpbmRvd1N0eWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Uk5HQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsWmVyb01lbW9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZUNvbXBhdGliaWxpdHlBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VwYXJhdGVQcm9jZXNz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q29tcGF0aWJsZVRleHRSZW5kZXJpbmdEZWZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V29ya2luZ0RpcmVjdG9yeUZyb21UYXJnZXQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbXBDb2xvcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0luZm9UaXA=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuZXhl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvZGVEb20uQ29tcGlsZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbXBvbmVudE1vZGVs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJTZXJ2aWNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuSW50ZXJvcFNlcnZpY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuVmVyc2lvbmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGFyZ2V0RGlyZWN0b3J5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGFyZ2V0RnJhbWV3b3JrQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"dnNzYWRtaW4uZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ezFCM0VBNURDLUI1ODctNDc4Ni1CNEVGLUJEMURDMzMyQUVBRX0=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezQ1MEQ4RkJBLUFEMjUtMTFEMC05OEE4LTA4MDAzNjFCMTEwM30=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezg3MUM1MzgwLTQyQTAtMTA2OS1BMkVBLTA4MDAyQjMwMzA5RH0=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezg3MUM1MzgwLTQyQTAtMTA2OS1BMkVBLTA4MDAyQjMwMzA5RH0gJUdVSUQ6IklTaGVsbEZvbGRlciIlIDB4RkZGRg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","strings":[{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"JGE2M2E4N2Y1LWM4NDItNDgwNC1hODJmLTI2ZDJlNzA3YmFjZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"LkRheVpQcm9maWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"LmxpdGVtb2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lm1kYmFja3Vw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lm1lbnU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk5FVCBGcmFtZXdvcmsgNC41","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk5FVEZyYW1ld29yayxWZXJzaW9uPXY0LjU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"LnVuaXR5M2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"LndvdHJlcGxheQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCA1ICYgREVM","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1N5c3RlbS5SZXNvdXJjZXMuVG9vbHMuU3Ryb25nbHlUeXBlZFJlc291cmNlQnVpbGRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"PD5jX19EaXNwbGF5Q2xhc3MxMV8w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGVuY3J5cHREaXJlY3Rvcnk+Yl9fMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFJTQUtleVZhbHVlPjxNb2R1bHVzPjNNTTVpbjRSd1pFWDFTclpFclB6NWNOK0d6RkNmUjV6K21ML0tDVWUzdGpIUG5JWm9mM05ESEYyN3F6WVFMZk5RMm8xRnhla1dueXRmcG5VV0VCNUdMcnk5Wm1scjhxVm9MYVNoZm1DOTZMenNjTlNGZEJ0bm02a1YvTldKU2h4bEFjVnY1NlBOcWpvTGNDUmUyT2w5dEVFQWxja1NYZm5FaWJpZzVJOUdJeG4rVi9lWGdlWDJhd2V3dzZKQWVaR3RTaFljNWE2SmFEM1ZEb082QlpDczdrekowZ0hLYVlwK0ZlSjJ4SnJlcFF1YVVIdXdzbFlWTlVsMjRZanFLbW5QQlJXUlkxZ0ZUTThycC8wZEFzVlBxLzBXaVJFNURoeElabVZacndGeG5manRCT1RmVUR4UzhMKzV1ZEo1dWZXMDM2V1E2YStwOUNKeU8yb1laVUZpT0grNDhoYURnZzZGRURVeUpvMEJwMWFQall4RHhwVW1lc2NGN2ZKd3NKc3NKL3c0Y0RmMytxZ3gxa3ZWUnM3TXR3bUxlcnQyQklQZDdueWIwTTh3eEFpcEdYYnIzZy82ejByVktpOHgyaS9jYVVPdHBrVmQzYWREVnVOTjdNOXRIUVMya3g3eUNPdm9Kc0habm9PQkZLMUpZWVdwQVpqR3c3TTN2VFdnU0lscGlDZm1xMWZ3RGlkMDM3OXhKcWNlRmZ2RFZQaW9QM0RVT24vT05QUVZTZlJlMDlRMHFVS1lkWVllSTdQTkxjc2hpWWtXNGxHUnlWYWUzZ2Q4OHdNT3kzNjdJbGRiblhZa2pCcUcvcjVzR2E0aFJoTDdOVnhEOFBhVUtmT3hMMjhncmw1QzNYOUNFQ2RZdlFPMFlFZTJTT2ljdVJqeXh3L2drZ3Q3VEFOWDZrPTwvTW9kdWx1cz48RXhwb25lbnQ+QVFBQjwvRXhwb25lbnQ+PC9SU0FLZXlWYWx1ZT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFxEZWNyeXB0IEluc3RydWN0aW9ucy50eHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"X0NvckV4ZU1haW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2VuY3JwdGVkQ29tcHV0ZXJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"X3B1YmxpY0tleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXpBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWjEyMzQ1Njc4OTAhQCMkJV4mKigpLV89Kzw+Liw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkck9mUGlubmVkT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":0,"total":79},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2ggXHJcblxyXG5cclxu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb25TZXR0aW5nc0Jhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHkgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb21wYW55QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb25maWd1cmF0aW9uQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb3B5cmlnaHRBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlEZXNjcmlwdGlvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlGaWxlVmVyc2lvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlQcm9kdWN0QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlUaXRsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlUcmFkZW1hcmtBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXN5bW1ldHJpY0FsZ29yaXRobQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcJFJlY3ljbGUuQmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcXCRSZWN5Y2xlLkJpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcXFVzZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcXFdpbmRvd3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVVTRVJQUk9GSUxFJVxEZXNrdG9wXE1vdmVcVmVyc2lvbnNcZW5jIC0gcGFyYVxEZWF0aFYyIC0gRmlsZXN0cmVhbSBWZXJzaW9uXERlYXRoXG9ialxSZWxlYXNlXHNzdmNob3N0LnBkYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcV2luZG93cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2lwaGVyTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsYXRpb25SZWxheGF0aW9uc0F0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsZXJHZW5lcmF0ZWRBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcG9uZW50cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcHV0ZXJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tVmlzaWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFpbmVyQ29udHJvbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weXJpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRW5jcnlwdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUGFzc3dvcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvU3RyZWFt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvU3RyZWFtTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VsdHVyZUluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVhdGguRm9ybTEucmVzb3VyY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnYWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnZXJOb25Vc2VyQ29kZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnaW5nTW9kZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmYXVsdEluc3RhbmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVsZXRlIHNoYWRvd3MgL2FsbCAvcXVpZXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdGluYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGlzcG9zaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RWRpdG9yQnJvd3NhYmxlQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RWRpdG9yQnJvd3NhYmxlU3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlVmlzdWFsU3R5bGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jcnlwdERpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdFJTQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bWVyYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW52aXJvbm1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXZlbnRBcmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXZlbnRIYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZURlc2NyaXB0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUVuY3J5cHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVN0cmVhbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybTFfTG9hZF8x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWV3b3JrRGlzcGxheU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJvbVhtbFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0NIYW5kbGVUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGVkQ29kZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGVSYW5kb21TYWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Fzc2VtYmx5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0NoYXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0N1bHR1cmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0RlZmF1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0V4ZWN1dGFibGVQYXRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0xlbmd0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X01hY2hpbmVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X1Jlc291cmNlTWFuYWdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlyZWN0b3JpZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXh0ZW5zaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9naWNhbERyaXZlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VHlwZUZyb21IYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3VpZEF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUNvbnRhaW5lcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUNyeXB0b1RyYW5zZm9ybQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SURpc3Bvc2FibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUVudW1lcmFibGVgMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNvbXBvbmVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5wdXRGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuYWxOYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"S01pY3Jvc29mdC5WaXN1YWxTdHVkaW8uRWRpdG9ycy5TZXR0aW5nc0Rlc2lnbmVyLlNldHRpbmdzU2luZ2xlRmlsZUdlbmVyYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxDb3B5cmlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxUcmFkZW1hcmtz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"bFN5c3RlbS5SZXNvdXJjZXMuUmVzb3VyY2VSZWFkZXIsIG1zY29ybGliLCBWZXJzaW9uPTQuMC4wLjAsIEN1bHR1cmU9bmV1dHJhbCwgUHVibGljS2V5VG9rZW49Yjc3YTVjNTYxOTM0ZTA4OSNTeXN0ZW0uUmVzb3VyY2VzLlJ1bnRpbWVSZXNvdXJjZVNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVzc2FnZUNyZWF0b3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IDIwMTg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3BfRXF1YWxpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JpZ2luYWxGaWxlbmFtZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFkZGluZ01vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFyYWxsZWxMb29wUmVzdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvIERlY3J5cHRpb24gS2V5Og==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc0RpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc0RpcmVjdG9yeUM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1N0YXJ0SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1dpbmRvd1N0eWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdE5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmFuZG9tTnVtYmVyR2VuZXJhdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzb3VyY2VDdWx0dXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzb3VyY2VNYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdW1lTGF5b3V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmZjMjg5OERlcml2ZUJ5dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmlqbmRhZWxNYW5hZ2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"Uk5HQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsWmVyb01lbW9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZUNvbXBhdGliaWxpdHlBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZVR5cGVIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0FyZ3VtZW50cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0F1dG9TY2FsZURpbWVuc2lvbnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0F1dG9TY2FsZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0NsaWVudFNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0NyZWF0ZU5vV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0N1bHR1cmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0ZpbGVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X09wYWNpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X1BhZGRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X1Nob3dJblRhc2tiYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X1dpbmRvd1N0eWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q29tcGF0aWJsZVRleHRSZW5kZXJpbmdEZWZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuZXhl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuUHJvcGVydGllcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuUHJvcGVydGllcy5SZXNvdXJjZXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3N2Y2hvc3QuUHJvcGVydGllcy5SZXNvdXJjZXMucmVzb3VyY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3RhcnRBY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1RBVGhyZWFkQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nQnVpbGRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3VzcGVuZExheW91dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3ltbWV0cmljQWxnb3JpdGht","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY2hyb25pemVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvZGVEb20uQ29tcGlsZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbGxlY3Rpb25zLkdlbmVyaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbXBvbmVudE1vZGVs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbmZpZ3VyYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkRpYWdub3N0aWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkRyYXdpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkdsb2JhbGl6YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLklP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkxpbnE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJlZmxlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJlc291cmNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJTZXJ2aWNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuSW50ZXJvcFNlcnZpY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuVmVyc2lvbmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlRleHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlRocmVhZGluZy5UYXNrcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLldpbmRvd3MuRm9ybXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGFyZ2V0RGlyZWN0b3J5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGFyZ2V0RnJhbWV3b3JrQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pY29kZUVuY29kaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"djQuMC4zMDMxOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmFsaWRFeHRlbnNpb25z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"dnNzYWRtaW4uZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JhcE5vbkV4Y2VwdGlvblRocm93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVBbGxMaW5lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.bin","compromised":null,"detection_total":null,"total":null}]},{"name":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe:1816","strings":[{"value":"JUdVSUQ6IkAlc3lzdGVtcm9vdCVcc3lzdGVtMzJcbXNzdnAuZGxsLC0xMTAiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkAlc3lzdGVtcm9vdCVcc3lzdGVtMzJcbXNzdnAuZGxsLC0xMTIiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkAlUFJPR1JBTUZJTEVTJVwoeDg2KVxNaWNyb3NvZnQgT2ZmaWNlXE9mZmljZTE1XE1BUElTSEVMTC5ETEwsLTExMCIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1NlYXJjaEZvbGRlciIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1NlYXJjaEhvbWUiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1N0YXJ0TWVudVBhdGhDb21wbGV0ZVByb3ZpZGVyRm9sZGVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNMU0lEX1N0YXJ0TWVudVByb3ZpZGVyRm9sZGVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVycyBhbmQgRGV2aWNlcyIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbnRyb2wgUGFuZWwgY29tbWFuZCBvYmplY3QgZm9yIFN0YXJ0IG1lbnUgYW5kIGRlc2t0b3AiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbnRyb2wgUGFuZWwiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkRYUCIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkdhbWVzIEV4cGxvcmVyIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IklFIEhpc3RvcnkgYW5kIEZlZWRzIFNoZWxsIERhdGEgU291cmNlIGZvciBXaW5kb3dzIFNlYXJjaCIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6Ik1pY3Jvc29mdCBPbmVOb3RlIE5hbWVzcGFjZSBFeHRlbnNpb24gZm9yIFdpbmRvd3MgRGVza3RvcCBTZWFyY2giJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6Ik5ldHdvcmsiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6Ik90aGVyIFVzZXJzIEZvbGRlciIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlB1YmxpYyBGb2xkZXIiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlJlY3ljbGUgQmluIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlN0aWNreSBOb3RlcyBOYW1lc3BhY2UgRXh0ZW5zaW9uIGZvciBXaW5kb3dzIERlc2t0b3AgU2VhcmNoIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlVzZXJzRmlsZXMiJQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IlVzZXJzTGlicmFyaWVzIiU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IldpbmRvd3MgU2VhcmNoIFNlcnZpY2UgTWVkaWEgQ2VudGVyIE5hbWVzcGFjZSBFeHRlbnNpb24gSGFuZGxlciIl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDZiNDUzZTZlMmQ1YzRlNzY3ZTlmZWFlZWM1NDA2MWY4MDcxZGYwNmE1M2ZkYjM0NGU1MmE3YjE1OWRkYzVjNC5leGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRtaW5UYWJQcm9jcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsIG9mIHlvdXIgZmlsZXMgYXJlIGVuY3J5cHRlZCwgdG8gZGVjcnlwdCB0aGVtIHdyaXRlIHVzIHRvIGVtYWlsOiBEYXRhdXNlcjE3MjM0QHByb3Rvbm1haWwuY2ggMjA4LDIyOCw0MCw0NCwzNSw3NiwzOSwyMzEsMTYzLDIwOSwxNzgsMjMsOTEsMjUxLDM1LDIxMyw2NywxNjYsMTg4LDk3LDI0NiwxNjMsMzEsNzEsMTgsMTQsMTM3LDEwNywxODIsNzEsMjI0LDEyMCwzMywyMDQsMTgwLDY4LDE1NSwyNDAsMTk2LDE3NSwxMTksMTUwLDIxNSwxODU=","type":"Ansi","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dlZFJlc2VydmVkQ2hhcmFjdGVycw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dGaWxlQ0xTSURKdW5jdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzU2hvd0V4dA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0NoZWNrU2VsZWN0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0RldGVjdA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnJvd3NlSW5QbGFjZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVMb2NhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbEZvckF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3NpY1NoZWxs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0xSTG9hZExvZ0Rpcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudCBUeXBl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVXJpQ2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGJnSklURGVidWdMYXVuY2hTZXR0aW5n","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGJnTWFuYWdlZERlYnVnZ2Vy","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVsZWdhdGVFeGVjdXRl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2T3ZlcnJpZGVFbmFibGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNvbmZpZ0NhY2hl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVuZ2luZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1TSVBlZWs=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNlY3VyaXR5U2V0dGluZ3NDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWxsb3dSdW4=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9jT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFByZXR0eVBhdGg=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFNob3dTdXBlckhpZGRlbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRDYWNoZVF1b3RhSW5LQg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJpdmVNYXNr","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTG9n","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUHVueWNvZGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU2hlbGxFeGVjdXRlSG9va3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmVhdHVyZVNJTUQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUluVXNlTWlsbGlzZWNvbmRzQmV0d2VlblJldHJpZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUluVXNlUmV0cnlBdHRlbXB0cw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlyc3RSdW5Db21wbGV0ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9udENhY2hlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGFzTmF2aWdhdGlvbkVudW0=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZpbGVFeHQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZvbGRlclZlcmJz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUljb25z","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUluV2ViVmlldw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZU9uRGVza3RvcFBlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlsbENsaW1iaW5nX1RhcmdldFNpZ25hbFRvTm9pc2VSYXRpbw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SWNvbnNPbmx5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXgyMDE=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5oZXJpdENvbnNvbGVIYW5kbGVz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFJvb3Q=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50cmFuZXROYW1l","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVB2NExvb3BiYWNrQWx0ZXJuYXRpdmU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SXNTaG9ydGN1dA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGRhcENsaWVudEludGVncml0eQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5UG9saWN5VGltZVN0YW1w","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFdpdGhvdXRDT00=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nRmFpbHVyZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nZ2luZ0xldmVs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nUmVzb3VyY2VCaW5kcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJpdmVWZXJicw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJ2QnRu","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFydGFFeHRlbnNpb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW1pemVBcHBz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZWkuZGxs","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV2ZXJEZWZhdWx0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV2ZXJTaG93RXh0","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9DbGllbnRDaGVja3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db250cm9sUGFuZWw=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9GaWxlRm9sZGVySnVuY3Rpb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9JbnRlcm5ldEljb24=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9OZXRDcmF3bGluZw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TZXRGb2xkZXJz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TaW1wbGVTdGFydE1lbnU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TdGF0aWNEZWZhdWx0VmVyYg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9XZWJWaWV3","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Xb3JraW5nRGlyZWN0b3J5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T25seVVzZUxhdGVzdENMUg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW1pemVVc2VkQmluYXJpZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGluVG9OYW1lU3BhY2VUcmVl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlCeXBhc3M=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RlZEF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RSdW4=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHlfSEtMTV9vbmx5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VwYXJhdGVQcm9jZXNz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbk1lcmdpbmc=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0V29ya2luZ0RpcmVjdG9yeUZyb21UYXJnZXQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxTdGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbXBDb2xvcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0luZm9UaXA=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1N1cGVySGlkZGVu","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1R5cGVPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2lhbEZvbGRlcnNDYWNoZVNpemU=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3VwcHJlc3Npb25Qb2xpY3k=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtMzI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFiUHJvY0dyb3d0aA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VU5DQXNJbnRyYW5ldA==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRHJvcEhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSG9zdG5hbWVBc0FsaWFz","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlTGVnYWN5SWRlbnRpdHlGb3JtYXQ=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlTGVnYWN5VjJSdW50aW1lQWN0aXZhdGlvblBvbGljeURlZmF1bHRWYWx1ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlT2xkSG9zdFJlc29sdXRpb25PcmRlcg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlUnl1SklU","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNBbGlhc2VkTm90aWZpY2F0aW9ucw==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JESVNQTEFZ","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JQQVJTSU5H","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNQYXJzZURpc3BsYXlOYW1l","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNVbml2ZXJzYWxEZWxlZ2F0ZQ==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezFCM0VBNURDLUI1ODctNDc4Ni1CNEVGLUJEMURDMzMyQUVBRX0=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezQ1MEQ4RkJBLUFEMjUtMTFEMC05OEE4LTA4MDAzNjFCMTEwM30=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezg3MUM1MzgwLTQyQTAtMTA2OS1BMkVBLTA4MDAyQjMwMzA5RH0=","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezg3MUM1MzgwLTQyQTAtMTA2OS1BMkVBLTA4MDAyQjMwMzA5RH0gJUdVSUQ6IklTaGVsbEZvbGRlciIlIDB4RkZGRg==","type":"Unicode","source":"Runtime Data","process":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"cmd.exe","strings":[{"value":"L0MgY2hvaWNlIC9DIFkgL04gL0QgWSAvVCA1ICYgREVMIEM6XDA2YjQ1M2U2ZTJkNWM0ZTc2N2U5ZmVhZWVjNTQwNjFmODA3MWRmMDZhNTNmZGIzNDRlNTJhN2IxNTlkZGM1YzQuZXhl","type":"Ansi","source":"Process Commandline","process":null,"filename":"cmd.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"vssadmin.exe:2636","strings":[{"value":"MjA4MUZCNUQ=","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRjk0LS01MTEzMzU1MDQxMjY2Mzg2OTA5MTYyMzA1ODc4NS0xMzIzMDAxMjMzMTY1ODU3NTA5OC04ODk2MjUzMzYxODEwOTc5NzAwLTkwNTA2MzQ2","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2Vzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVRocm90dGxpbmc=","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW11bUFsbG93ZWRBbGxvY2F0aW9uU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"vssadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"choice.exe:2508","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRTJDLS0yMDE5MjI5NTM2MTg4NDc0NDkwNi04MjQyMTM1NzctMzM0MDU2MjQ5LTU1NDYxOTY5Ni0xOTA1OTYwNzU3MTQwMjU5NjQyNTEwMDcyOTA0NQ==","type":"Unicode","source":"Runtime Data","process":"choice.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"Xz9fX19fX18wXz9sX19sX19fX19fcV9fPz9fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]},{"name":"choice.exe","strings":[{"value":"Y2hvaWNlICAvQyBZIC9OIC9EIFkgL1QgNQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"choice.exe","compromised":null,"detection_total":null,"total":null}]}],"image":[]},"http_requests":[],"ftp_requests":[],"irc_requests":[],"strings_resources":["C:\\Users\\user\\Desktop\\Move\\Versions\\enc - para\\DeathV2 - Filestream Version\\Death\\obj\\Release\\ssvchost.pdb","http://protonmail.ch"],"tags_details":[],"sample_flags":["User Comment"],"suricata_alerts":[],"version_info":[{"id":"Translation","value":"0x0000 0x04b0"},{"id":"LegalCopyright","value":"Copyright Microsoft 2018"},{"id":"Assembly Version","value":"1.0.0.0"},{"id":"InternalName","value":"ssvchost.exe"},{"id":"FileVersion","value":"1.0.0.0"},{"id":"CompanyName","value":"Microsoft"},{"id":"LegalTrademarks","value":null},{"id":"Comments","value":null},{"id":"ProductName","value":"SSvchost"},{"id":"ProductVersion","value":"1.0.0.0"},{"id":"FileDescription","value":"SSvchost"},{"id":"OriginalFilename","value":"ssvchost.exe"}],"apk_info":null,"apps_info":[{"name":"Access","product":null,"version":null},{"name":"Acrobat Reader","product":"Adobe Acrobat Reader DC","version":"18.9.20050.254034"},{"name":"Chrome","product":null,"version":null},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.4756.1000"},{"name":"Firefox","product":"Firefox","version":"57.0.1"},{"name":"Flash","product":"Shockwave Flash","version":"27,0,0,187"},{"name":"Hancom Office Hancell","product":null,"version":null},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.9600.16428"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1510.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.4763.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.4754.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.4762.1000"}],"architecture":"32 Bit","document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":"Microsoft visual C# / Basic .NET","file_imports":[{"module":"mscoree.dll","functions":["_CorExeMain"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[{"value":"protonmail.ch","stream_uid":"7b789f2c40af176e70132a5a2001feaf-6000010-Form1~messageCreator","stream_modal_data_link":"/bff/report/5eeb8a48e14ac2580b673b4a/processes/00077451-00001816/streams/0/7b789f2c40af176e70132a5a2001feaf-6000010-Form1~messageCreator"}],"language":"NEUTRAL","authentihash":"69cdc7e97ded6e26c7b6c599faaede76c244e204aa450fead2ba8ca55b6a76e7","entrypoint_bytes":null,"pdb_timestamp":"2020-04-24T23:21:53+00:00","pdb_pathway":"C:\\Users\\user\\Desktop\\Move\\Versions\\enc - para\\DeathV2 - Filestream Version\\Death\\obj\\Release\\ssvchost.pdb","pdb_guid":"CDA0CB626FC04EDE8E8BAC34CDAF2DB4","file_sections":[{"name":".text","entropy":5.37071580621,"virtual_address":"0x2000","virtual_size":"0x3f68","raw_size":"0x4000","md5":"c62a196b5f0ad761b131f14431197db9","characteristics":[]},{"name":".rsrc","entropy":4.11537070238,"virtual_address":"0x6000","virtual_size":"0x5d0","raw_size":"0x600","md5":"0a24b2602781a8452c4c078c681558ec","characteristics":[]},{"name":".reloc","entropy":0.0815394123432,"virtual_address":"0x8000","virtual_size":"0xc","raw_size":"0x200","md5":"5cad9e6818ecdeabc60150336a69aa01","characteristics":[]}],"file_exports":[],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[{"name":"RT_VERSION","rva":"0x6090","size":"0x340","type":"data","language":"neutral"},{"name":"RT_MANIFEST","rva":"0x63e0","size":"0x1ea","type":"XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators","language":"neutral"}],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[{"_id":"5eeb8a48e14ac2580b673b4e","content":"DeathHiddenTear","user":null,"created_at":"2020-06-18T15:37:44+00:00"}],"email_headers":null,"classification_tags":[],"tags":[],"submissions":[{"submission_id":"5eeb8a48e14ac2580b673b4b","filename":"06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4","url":null,"created_at":"2020-06-18T15:37:44+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Not all Falcon MalQuery lookups completed in time","Not all sources for indicator ID \"api-55\" are available in the report","Not all sources for indicator ID \"hooks-8\" are available in the report","Not all sources for indicator ID \"registry-72\" are available in the report","Some low-level data is hidden, as this is only a slim report"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5eeb8a48e14ac2580b673b4a/download/files/report_json","file_size":219295},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5eeb8a48e14ac2580b673b4a/download/files/memory_strings","file_size":3836},"certificate":null,"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5eeb8a48e14ac2580b673b4a/download/files/network_pcap","file_size":1001},"memory_dumps":null},"system_resource_monitor":null,"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4","4de7fa20e3224382d8c4a81017e5bdd4673afbef9c0f017e203d7b78977fbf8c","db06c3534964e3fc79d2763144ba53742d7fa250ca336f4a0fe724b75aaff386","5af7d20da70ccb712c0e441e83f01be0633f6f804289bff1b3ceb5f853f0dc80"]}}]]}] 1f:null 23:[["$","title","0",{"children":"Malicious Generic.Ransom.Small — Falcon Sandbox Report — Score 100/100 — Sample 06b453e6e2d5… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sandbox report 5eeb8a48e14a…. Malware family: Generic.Ransom.Small. Threat score 100/100. 5 malicious and 13 suspicious behavioral indicators across 36 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4/5eeb8a48e14ac2580b673b4a"}],["$","meta","4",{"property":"og:title","content":"Malicious Generic.Ransom.Small — Falcon Sandbox Report — Score 100/100 — Sample 06b453e6e2d5… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sandbox report 5eeb8a48e14a…. Malware family: Generic.Ransom.Small. Threat score 100/100. 5 malicious and 13 suspicious behavioral indicators across 36 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/06b453e6e2d5c4e767e9feaeec54061f8071df06a53fdb344e52a7b159ddc5c4/5eeb8a48e14ac2580b673b4a"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Generic.Ransom.Small — Falcon Sandbox Report — Score 100/100 — Sample 06b453e6e2d5… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sandbox report 5eeb8a48e14a…. Malware family: Generic.Ransom.Small. Threat score 100/100. 5 malicious and 13 suspicious behavioral indicators across 36 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]