26:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/23qlsjvno4-wq.js","/_next/static/chunks/11pkz44bx8x1b.js","/_next/static/chunks/04k_7k5p4krw4.js"],"ReportDetailWrapper"] 2c:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 25:T575,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Gen:Heur.Ransom.Imps — Falcon Sandbox Report — Score 100/100 — Sample 31cf5253f4a1…","description":"Malicious verdict for sandbox report 5e38479a3f4e…. Malware family: Gen:Heur.Ransom.Imps. Threat score 100/100. 3 malicious and 12 suspicious behavioral indicators across 29 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe/5e38479a3f4ec4253646eb47","keywords":["Malicious","Gen:Heur.Ransom.Imps","sandbox report","malware analysis","MITRE ATT\u0026CK","31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe"],"about":{"@type":"SoftwareApplication","name":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","applicationCategory":"PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows","identifier":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Gen:Heur.Ransom.Imps","sandboxEnvironment":"Windows 7 64 bit","behavioralIndicators":{"malicious":3,"suspicious":12,"totalSignatures":29},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T570,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28:T6f1,"_BlueCheeserWin7.exe" touched file "C:\Windows\System32\notepad.exe" "_BlueCheeserWin7.exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\clr.dll" "_BlueCheeserWin7.exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll" "_BlueCheeserWin7.exe" touched file "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll" "_BlueCheeserWin7.exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\machine.config" "_BlueCheeserWin7.exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\config\security.config" "_BlueCheeserWin7.exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\config\security.config.cch" "_BlueCheeserWin7.exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\config\enterprisesec.config" "_BlueCheeserWin7.exe" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\config\enterprisesec.config.cch" "_BlueCheeserWin7.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "_BlueCheeserWin7.exe" touched file "C:\Windows\assembly\NativeImages_v2.0.50727_64\index351.dat" "_BlueCheeserWin7.exe" touched file "C:\Windows\System32\l_intl.nls" "_BlueCheeserWin7.exe" touched file "C:\Windows\System32\rsaenh.dll" "_BlueCheeserWin7.exe" touched file "C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp" "_BlueCheeserWin7.exe" touched file "C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp" "_BlueCheeserWin7.exe" touched file "C:\Windows\assembly\pubpol201.dat"29:Tb40,"_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C975B3" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C97480" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C9755E" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C9760D" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "669065488b0425c8140000c366669066669090" to virtual address "0xF2C95B40" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "4889114881fa18109502722448c1e90a80b9005b941aff7502f3c3c681005b941affc366666690666666906666906690f3c3ff7502f3c3c60408ffc366666690f3c3666666906666669066669066669090" to virtual address "0xF2C95F00" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "e74b6c96adda0000" to virtual address "0xF2A21D70" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C97403" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "eb11c366669066669066669066669066669090" to virtual address "0xF2C95BC0" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C978AD" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "65488b0425d0140000" to virtual address "0xF2C98C8B" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "65488b0425c8140000" to virtual address "0xF2C97A44" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C9743F" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "65488b0425c8140000" to virtual address "0xF2C97A25" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "65488b0425c8140000" to virtual address "0xF2C97A60" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "65488b0425d0140000" to virtual address "0xF2C98CCB" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C977AA" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "654c8b1c25c8140000" to virtual address "0xF2C974FB" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "65488b0425d0140000" to virtual address "0xF2C98C0B" (part of module "MSCORWKS.DLL") "_BlueCheeserWin7.exe" wrote bytes "65488b0425c8140000" to virtual address "0xF2C9863C" (part of module "MSCORWKS.DLL")2a:T570,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2b:T60e8,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"job_id":"5e38479a3f4ec4253646eb47","environment_id":120,"environment_description":"Windows 7 64 bit","size":8704,"type":"PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows","type_short":["peexe","assembly","executable"],"type_short_id":".NET exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","md5":"6f2ee43839efbb5665c706dcf017465c","sha1":"8f76eda1988b0df2c6d57a2f1ea8e0c54ed9df31","sha256":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe","sha512":"ccdefab3a0fa04831eca9a05faa05bc2fa61352d79f200925d78c0f4a9b19eec4c0aba687b79b58809b1cc522fd5d831993ad3e7d5ed05baa2fb69ef5377e24c","ssdeep":"96:ajAiOqKF3SWIvx4fyas2Lyaypyj3joxnn61HYC7l0dFOgzgLr7BfCR9zNt:a0iOqHx45y5gToxnn6h7lo9qFfCR3","imphash":"f34d5f2d4577ed6d9ceec516c1f5a744","entrypoint":"0x403652","entrypoint_section":".text","image_base":null,"subsystem":null,"image_file_characteristics":[],"dll_characteristics":[],"major_os_version":null,"minor_os_version":null,"av_detect":51,"vx_family":"Gen:Heur.Ransom.Imps","url_analysis":false,"analysis_start_time":"2020-02-03T16:17:40+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":false,"certificates_validation_message":"No signature was present in the subject. (0x800b0100)","domains":[],"compromised_hosts":[],"hosts":[],"total_network_connections":0,"total_processes":2,"total_signatures":29,"extracted_files":[{"name":"Instructions.txt","file_path":"%USERPROFILE%\\Desktop\\Instructions.txt","file_size":0,"md5":null,"sha1":null,"sha256":null,"sha512":null,"type_tags":["empty"],"description":"empty","runtime_process":"notepad.exe (PID: 2460)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null}],"file_metadata":{"file_compositions":[],"imported_objects":[],"file_analysis":[],"total_file_compositions_imports":null},"processes":[{"uid":"00031561-00003704","parentuid":null,"name":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","normalized_path":"C:\\31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","command_line":null,"sha256":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe","av_label":"Gen:Heur.Ransom.Imps","av_matched":37,"av_total":72,"pid":"3704","icon":"$27","process_flags":[{"name":"Extracted Streams","data":null},{"name":"Multiscan Match","data":"37/72"}]},{"uid":"00031755-00002460","parentuid":"00031561-00003704","name":"notepad.exe","normalized_path":"%WINDIR%\\System32\\notepad.exe","command_line":"%USERPROFILE%\\Desktop\\Instructions.txt","sha256":"933e1778b2760b3a9194c2799d7b76052895959c3caedefb4e9d764cbb6ad3b5","av_label":null,"av_matched":null,"av_total":null,"pid":"2460","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]}],"mitre_attcks":[{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attck_id":"T1215","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Opens the Kernel Security Device Driver (KsecDD) of Windows"],"parent":null},{"tactic":"Persistence","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Writes data to a remote process"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Writes data to a remote process"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Software Packing","attck_id":"T1045","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1045","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Matched Compiler/Packer signature"],"parent":null},{"tactic":"Defense Evasion","technique":"File Deletion","attck_id":"T1107","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1107","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Marks file for deletion"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Credential Access","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attck_id":"T1120","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Queries volume information"],"parent":null},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":3,"suspicious_identifiers":["Reads information about supported languages","Reads the active computer name","Reads the cryptographic machine GUID"],"informative_identifiers_count":1,"informative_identifiers":["Reads the registry for installed applications"],"parent":null}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-11","type":6,"relevance":2,"name":"Queries volume information","description":"\"notepad.exe\" queries volume information of \"%USERPROFILE%\\Desktop\\Instructions.txt\" at 00031755-00002460-00000046-6023799356","description_v2":["\"notepad.exe\" queries volume information of \"%USERPROFILE%\\Desktop\\Instructions.txt\" at 00031755-00002460-00000046-6023799356"],"description_v3":[{"type":"text","value":"\"notepad.exe\" queries volume information of \"%USERPROFILE%\\Desktop\\Instructions.txt\" at 00031755-00002460-00000046-6023799356"}],"origin":"API Call","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-55","type":3,"relevance":10,"name":"Reads the registry for installed applications","description":"\"_BlueCheeserWin7.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\NOTEPAD.EXE\")\n \"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\NOTEPAD.EXE\")","description_v2":["\"_BlueCheeserWin7.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\NOTEPAD.EXE\")","\"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\NOTEPAD.EXE\")"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\NOTEPAD.EXE\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\NOTEPAD.EXE\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-7","type":2,"relevance":1,"name":"Contains PDB pathways","description":"\"Y:\\2. Development Projects\\Archive\\Ransomware\\BlueCheeser\\BlueCheeser\\obj\\Debug\\BlueCheeser.pdb\"","description_v2":["\"Y:\\2. Development Projects\\Archive\\Ransomware\\BlueCheeser\\BlueCheeser\\obj\\Debug\\BlueCheeser.pdb\""],"description_v3":[{"type":"text","value":"\"Y:\\2. Development Projects\\Archive\\Ransomware\\BlueCheeser\\BlueCheeser\\obj\\Debug\\BlueCheeser.pdb\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-3","type":10,"relevance":0,"name":"Loads the .NET runtime environment","description":"\"_BlueCheeserWin7.exe\" loaded module \"%WINDIR%\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\0478aed7fc25ae268474c704fd2a3e0f\\mscorlib.ni.dll\" at EBA30000","description_v2":["\"_BlueCheeserWin7.exe\" loaded module \"%WINDIR%\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\0478aed7fc25ae268474c704fd2a3e0f\\mscorlib.ni.dll\" at EBA30000"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" loaded module \"%WINDIR%\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\0478aed7fc25ae268474c704fd2a3e0f\\mscorlib.ni.dll\" at EBA30000"}],"origin":"Loaded Module","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-72","type":3,"relevance":3,"name":"Overview of unique CLSIDs touched in registry","description":"\"_BlueCheeserWin7.exe\" touched \"Computer\" (Path: \"HKCU\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")\n \"_BlueCheeserWin7.exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\")","description_v2":["\"_BlueCheeserWin7.exe\" touched \"Computer\" (Path: \"HKCU\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")","\"_BlueCheeserWin7.exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\")"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched \"Computer\" (Path: \"HKCU\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-67","type":9,"relevance":10,"name":"Process launched with changed environment","description":"Process \"notepad.exe\" (UID: 00031755-00002460) was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles\"\n Process \"notepad.exe\" (UID: 00031755-00002460) was launched with missing environment variables: \"PROCESSOR_ARCHITEW6432\"","description_v2":["Process \"notepad.exe\" (UID: 00031755-00002460) was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles\"","Process \"notepad.exe\" (UID: 00031755-00002460) was launched with missing environment variables: \"PROCESSOR_ARCHITEW6432\""],"description_v3":[{"type":"text","value":"Process \"notepad.exe\""},{"type":"process","process_uid":"00031755-00002460","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles\""},{"type":"linebreak"},{"type":"text","value":"Process \"notepad.exe\""},{"type":"process","process_uid":"00031755-00002460","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"PROCESSOR_ARCHITEW6432\""}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"Spawned process \"notepad.exe\" with commandline \"%USERPROFILE%\\Desktop\\Instructions.txt\" (UID: 00031755-00002460)","description_v2":["Spawned process \"notepad.exe\" with commandline \"%USERPROFILE%\\Desktop\\Instructions.txt\" (UID: 00031755-00002460)"],"description_v3":[{"type":"text","value":"Spawned process \"notepad.exe\" with commandline \"%USERPROFILE%\\Desktop\\Instructions.txt\""},{"type":"process","process_uid":"00031755-00002460","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-103","type":9,"relevance":3,"name":"Spawns new processes that are not known child processes","description":"Spawned process \"notepad.exe\" with commandline \"%USERPROFILE%\\Desktop\\Instructions.txt\" (UID: 00031755-00002460)","description_v2":["Spawned process \"notepad.exe\" with commandline \"%USERPROFILE%\\Desktop\\Instructions.txt\" (UID: 00031755-00002460)"],"description_v3":[{"type":"text","value":"Spawned process \"notepad.exe\" with commandline \"%USERPROFILE%\\Desktop\\Instructions.txt\""},{"type":"process","process_uid":"00031755-00002460","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-16","type":6,"relevance":1,"name":"Connects to LPC ports","description":"\"_BlueCheeserWin7.exe\" connecting to \"\\ThemeApiPort\"\n \"notepad.exe\" connecting to \"\\ThemeApiPort\"","description_v2":["\"_BlueCheeserWin7.exe\" connecting to \"\\ThemeApiPort\"","\"notepad.exe\" connecting to \"\\ThemeApiPort\""],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" connecting to \"\\ThemeApiPort\""},{"type":"linebreak"},{"type":"text","value":"\"notepad.exe\" connecting to \"\\ThemeApiPort\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"binary-0","type":8,"relevance":3,"name":"Dropped files","description":"\"Instructions.txt\" has type \"ASCII text with CRLF line terminators\"\n \"Instructions.txt\" has type \"empty\"","description_v2":["\"Instructions.txt\" has type \"ASCII text with CRLF line terminators\"","\"Instructions.txt\" has type \"empty\""],"description_v3":[{"type":"text","value":"\"Instructions.txt\" has type \"ASCII text with CRLF line terminators\""},{"type":"linebreak"},{"type":"text","value":"\"Instructions.txt\" has type \"empty\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"$28","description_v2":["\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\System32\\notepad.exe\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\clr.dll\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\machine.config\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\security.config\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\security.config.cch\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\enterprisesec.config\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\enterprisesec.config.cch\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\assembly\\NativeImages_v2.0.50727_64\\index351.dat\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\System32\\l_intl.nls\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\System32\\rsaenh.dll\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp\"","\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\assembly\\pubpol201.dat\""],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"%WINDIR%\\System32\\notepad.exe\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\clr.dll\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\machine.config\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\security.config\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\security.config.cch\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\enterprisesec.config\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\enterprisesec.config.cch\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\assembly\\NativeImages_v2.0.50727_64\\index351.dat\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\System32\\l_intl.nls\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\System32\\rsaenh.dll\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp\""},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" touched file \"C:\\Windows\\assembly\\pubpol201.dat\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"api-37","type":6,"relevance":10,"name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"_BlueCheeserWin7.exe\" opened \"\\Device\\KsecDD\"\n \"notepad.exe\" opened \"\\Device\\KsecDD\"","description_v2":["\"_BlueCheeserWin7.exe\" opened \"\\Device\\KsecDD\"","\"notepad.exe\" opened \"\\Device\\KsecDD\""],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"notepad.exe\" opened \"\\Device\\KsecDD\""}],"origin":"API Call","attck_id":"T1215","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-18","type":0,"relevance":10,"name":"Matched Compiler/Packer signature","description":"\"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin\" was detected as \"Microsoft visual C# v7.0 / Basic .NET\"","description_v2":["\"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin\" was detected as \"Microsoft visual C# v7.0 / Basic .NET\""],"description_v3":[{"type":"text","value":"\"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin\" was detected as \"Microsoft visual C# v7.0 / Basic .NET\""}],"origin":"Static Parser","attck_id":"T1045","capec_id":"CAPEC-570","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1045","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Detection/Stealthyness","identifier":"api-10","type":6,"relevance":6,"name":"Queries kernel debugger information","description":"\"_BlueCheeserWin7.exe\" at 00031561-00003704-00000033-10462061101","description_v2":["\"_BlueCheeserWin7.exe\" at 00031561-00003704-00000033-10462061101"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" at 00031561-00003704-00000033-10462061101"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"api-1","type":6,"relevance":10,"name":"Creates guarded memory regions (anti-debugging trick to avoid memory dumping)","description":"\"_BlueCheeserWin7.exe\" is allocating memory with PAGE_GUARD access rights","description_v2":["\"_BlueCheeserWin7.exe\" is allocating memory with PAGE_GUARD access rights"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" is allocating memory with PAGE_GUARD access rights"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-35","type":3,"relevance":5,"name":"Reads the active computer name","description":"\"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","description_v2":["\"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-1","type":3,"relevance":10,"name":"Reads the cryptographic machine GUID","description":"\"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","description_v2":["\"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"api-24","type":6,"relevance":10,"name":"Tries to sleep for a long time (more than two minutes)","description":"\"_BlueCheeserWin7.exe\" sleeping for \"1566804069\" milliseconds","description_v2":["\"_BlueCheeserWin7.exe\" sleeping for \"1566804069\" milliseconds"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" sleeping for \"1566804069\" milliseconds"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-6","type":6,"relevance":4,"name":"Reads configuration files","description":"\"_BlueCheeserWin7.exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\"","description_v2":["\"_BlueCheeserWin7.exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\""],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"api-51","type":6,"relevance":5,"name":"Opens the MountPointManager (often used to detect additional infection locations)","description":"\"_BlueCheeserWin7.exe\" opened \"\\Device\\MountPointManager\"","description_v2":["\"_BlueCheeserWin7.exe\" opened \"\\Device\\MountPointManager\""],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" opened \"\\Device\\MountPointManager\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Ransomware/Banking","identifier":"string-13","type":2,"relevance":7,"name":"Detected indicator that file is ransomware","description":"\"Looks like all your desktop files have been encrypted!\" (Source: 31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin, Indicator: \"files have been encrypted\")\n \"Looks like all your desktop files have been encrypted!\nTo decrypt, send $400 to the bitcoin wallet: 43IU64UGG645G37I670IITYYR5093U55KJ5HE\nRIP Your personal files if you dont pay...\" (Source: 00031561-00003704-00000005-10751440908, Indicator: \"files have been encrypted\")","description_v2":["\"Looks like all your desktop files have been encrypted!\" (Source: 31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin, Indicator: \"files have been encrypted\")","\"Looks like all your desktop files have been encrypted!","To decrypt, send $400 to the bitcoin wallet: 43IU64UGG645G37I670IITYYR5093U55KJ5HE","RIP Your personal files if you dont pay...\" (Source: 00031561-00003704-00000005-10751440908, Indicator: \"files have been encrypted\")"],"description_v3":[{"type":"text","value":"\"Looks like all your desktop files have been encrypted!\" (Source: 31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin, Indicator: \"files have been encrypted\")"},{"type":"linebreak"},{"type":"text","value":"\"Looks like all your desktop files have been encrypted!"},{"type":"linebreak"},{"type":"text","value":"To decrypt, send $400 to the bitcoin wallet: 43IU64UGG645G37I670IITYYR5093U55KJ5HE"},{"type":"linebreak"},{"type":"text","value":"RIP Your personal files if you dont pay...\" (Source: 00031561-00003704-00000005-10751440908, Indicator: \"files have been encrypted\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"api-26","type":6,"relevance":10,"name":"Marks file for deletion","description":"\"C:\\31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe\" marked \"%USERPROFILE%\\Desktop\\desktop.ini\" for deletion","description_v2":["\"C:\\31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe\" marked \"%USERPROFILE%\\Desktop\\desktop.ini\" for deletion"],"description_v3":[{"type":"text","value":"\"C:\\31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe\" marked \"%USERPROFILE%\\Desktop\\desktop.ini\" for deletion"}],"origin":"API Call","attck_id":"T1107","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1107","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"api-25","type":6,"relevance":7,"name":"Opens file with deletion access rights","description":"\"_BlueCheeserWin7.exe\" opened \"%APPDATA%\\Microsoft\\CLR Security Config\\v2.0.50727.312\\64bit\\security.config.cch.3704.494984\" with delete access","description_v2":["\"_BlueCheeserWin7.exe\" opened \"%APPDATA%\\Microsoft\\CLR Security Config\\v2.0.50727.312\\64bit\\security.config.cch.3704.494984\" with delete access"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" opened \"%APPDATA%\\Microsoft\\CLR Security Config\\v2.0.50727.312\\64bit\\security.config.cch.3704.494984\" with delete access"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"hooks-8","type":11,"relevance":10,"name":"Installs hooks/patches the running process","description":"$29","description_v2":["\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C975B3\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C97480\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C9755E\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C9760D\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"669065488b0425c8140000c366669066669090\" to virtual address \"0xF2C95B40\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"4889114881fa18109502722448c1e90a80b9005b941aff7502f3c3c681005b941affc366666690666666906666906690f3c3ff7502f3c3c60408ffc366666690f3c3666666906666669066669066669090\" to virtual address \"0xF2C95F00\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"e74b6c96adda0000\" to virtual address \"0xF2A21D70\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C97403\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"eb11c366669066669066669066669066669090\" to virtual address \"0xF2C95BC0\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C978AD\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF2C98C8B\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF2C97A44\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C9743F\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF2C97A25\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF2C97A60\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF2C98CCB\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C977AA\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C974FB\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF2C98C0B\" (part of module \"MSCORWKS.DLL\")","\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF2C9863C\" (part of module \"MSCORWKS.DLL\")"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C975B3\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C97480\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C9755E\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C9760D\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"669065488b0425c8140000c366669066669090\" to virtual address \"0xF2C95B40\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"4889114881fa18109502722448c1e90a80b9005b941aff7502f3c3c681005b941affc366666690666666906666906690f3c3ff7502f3c3c60408ffc366666690f3c3666666906666669066669066669090\" to virtual address \"0xF2C95F00\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"e74b6c96adda0000\" to virtual address \"0xF2A21D70\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C97403\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"eb11c366669066669066669066669066669090\" to virtual address \"0xF2C95BC0\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C978AD\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF2C98C8B\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF2C97A44\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C9743F\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF2C97A25\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF2C97A60\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF2C98CCB\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C977AA\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"654c8b1c25c8140000\" to virtual address \"0xF2C974FB\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425d0140000\" to virtual address \"0xF2C98C0B\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote bytes \"65488b0425c8140000\" to virtual address \"0xF2C9863C\" (part of module \"MSCORWKS.DLL\")"}],"origin":"Hook Detection","attck_id":"T1179","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"registry-25","type":3,"relevance":3,"name":"Reads information about supported languages","description":"\"notepad.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","description_v2":["\"notepad.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"],"description_v3":[{"type":"text","value":"\"notepad.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-3","type":12,"relevance":10,"name":"Sample was identified as malicious by a large number of Antivirus engines","description":"37/72 Antivirus vendors marked sample as malicious (51% detection rate)","description_v2":["37/72 Antivirus vendors marked sample as malicious (51% detection rate)"],"description_v3":[{"type":"text","value":"37/72 Antivirus vendors marked sample as malicious (51% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-0","type":12,"relevance":8,"name":"Sample was identified as malicious by at least one Antivirus engine","description":"37/72 Antivirus vendors marked sample as malicious (51% detection rate)","description_v2":["37/72 Antivirus vendors marked sample as malicious (51% detection rate)"],"description_v3":[{"type":"text","value":"37/72 Antivirus vendors marked sample as malicious (51% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistance","identifier":"api-0","type":6,"relevance":6,"name":"Writes data to a remote process","description":"\"_BlueCheeserWin7.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)\n \"_BlueCheeserWin7.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)\n \"_BlueCheeserWin7.exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)","description_v2":["\"_BlueCheeserWin7.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)","\"_BlueCheeserWin7.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)","\"_BlueCheeserWin7.exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)"],"description_v3":[{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)"},{"type":"linebreak"},{"type":"text","value":"\"_BlueCheeserWin7.exe\" wrote 8 bytes to a remote process \"%WINDIR%\\System32\\notepad.exe\" (Handle: 600)"}],"origin":"API Call","attck_id":"T1055","capec_id":"CAPEC-242","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","stream_data":null}],"detonation_parameters":{"action_script":"default","experimental_anti_evasion":true,"script_logging":false,"allow_sample_tampering":false,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":180,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default.au3","monitor_script_description":"Default analysis","windows_version_name":"Windows 7","windows_version_edition":"Professional","windows_version_service_pack":"Service Pack 1","windows_version_version":"6.1 (build 7601)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"8.30","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Ransomware","details":["Detected indicator that file is ransomware"]},{"name":"Persistence","details":["Writes data to a remote process"]},{"name":"Fingerprint","details":["Queries kernel debugger information","Reads the cryptographic machine GUID","Reads the active computer name"]},{"name":"Evasive","details":["Tries to sleep for a long time (more than two minutes)","Marks file for deletion"]},{"name":"Spreading","details":["Opens the MountPointManager (often used to detect additional infection locations)"]}],"icon":"$2a","visualization":"$2b","classification":["81.0% (.EXE) Generic CIL Executable (.NET, Mono, etc.)","7.2% (.DLL) Win32 Dynamic Link Library (generic)","4.9% (.EXE) Win32 Executable (generic)","2.2% (.EXE) OS/2 Executable (generic)","2.2% (.EXE) Generic Win/DOS Executable"],"dns_requests":[],"contacted_hosts":[],"contacted_countries":{"countries":[],"coordinates":[]},"port_infos":[],"extracted_strings":{"all":[{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JDExZDk3Yzc4LWMxYzgtNDA4Mi04ZWUwLTM4NzJkYWNkYzQ4ZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JVVTRVJQUk9GSUxFJVxEZXNrdG9wXEluc3RydWN0aW9ucy50eHQ=","type":"Ansi","source":"Process Commandline","process":null,"filename":"notepad.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MzFjZjUyNTNmNGExZDdkYjJmZjJkNTgwYjkyYjI1YmVjOWM0ZWY4NmZjMTVjMzZjZTI3NTMyZmI3M2RlOGRiZV9CbHVlQ2hlZXNlcldpbjcuZXhl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MzFjZjUyNTNmNGExZDdkYjJmZjJkNTgwYjkyYjI1YmVjOWM0ZWY4NmZjMTVjMzZjZTI3NTMyZmI3M2RlOGRiZV9CbHVlQ2hlZXNlcldpbjcuSU5J","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"OF9fX19fX19fX19fX19fX19fX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"OTBfX19fX19fYw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9InllcyI/Pjxhc3NlbWJseSB4bWxucz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEiIG1hbmlmZXN0VmVyc2lvbj0iMS4wIj4gIDxhc3NlbWJseUlkZW50aXR5IHZlcnNpb249IjEuMC4wLjAiIG5hbWU9Ik15QXBwbGljYXRpb24uYXBwIi8+ICA8dHJ1c3RJbmZvIHhtbG5zPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOmFzbS52MiI+ICAgIDxzZWN1cml0eT4gICAgICA8cmVxdWVzdGVkUHJpdmlsZWdlcyB4bWxucz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjMiPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSJhc0ludm9rZXIiIHVpQWNjZXNzPSJmYWxzZSIvPiAgICAgIDwvcmVxdWVzdGVkUHJpdmlsZWdlcz4gICAgPC9zZWN1cml0eT4gIDwvdHJ1c3RJbmZvPjwvYXNzZW1ibHk+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fPz9fZV8wXz9fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX192P19fX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"XFxJbnN0cnVjdGlvbnMudHh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwNzc0LTc1MTY3MzQxMzE3MDkyNTExODQzNTg5NjU5NzUtMTY5MDU3ODg4My05NjM4NzcwNzctNTM1NDk0MjktOTMzMTQ4MTg3LTMwMDk4MDQ2","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XzAwPzBfX19fX3ZnMF8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X18wX19fX19fcV8/","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18nX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX18wXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX18wXz9sX19sX19fX19fcV9fX18/X18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19pLCw/X2FfLGknLDA=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X0NvckV4ZU1haW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X25fcnVjdF9vbl8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dlZFJlc2VydmVkQ2hhcmFjdGVycw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dGaWxlQ0xTSURKdW5jdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzU2hvd0V4dA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHkgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb21wYW55QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb25maWd1cmF0aW9uQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb3B5cmlnaHRBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlEZXNjcmlwdGlvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlGaWxlVmVyc2lvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlQcm9kdWN0QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlUaXRsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlUcmFkZW1hcmtBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXN5bW1ldHJpY0FsZ29yaXRobQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0NoZWNrU2VsZWN0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Qmx1ZUNoZWVzZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qmx1ZUNoZWVzZXIuZXhl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnJvd3NlSW5QbGFjZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVMb2NhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbEZvckF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2lwaGVyTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3NpY1NoZWxs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0xSTG9hZExvZ0Rpcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsYXRpb25SZWxheGF0aW9uc0F0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tVmlzaWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlnTWFzaw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlnU3RyaW5n","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudCBUeXBl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29weXJpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRW5jcnlwdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvU3RyZWFt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvU3RyZWFtTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1VsY2Y1bDUzZjRhbGQ3ZGJsX2xkNTgwYjlsYmw1YmVjOWM0ZWY4amZjbDVjM2pjXzc1M2xmYjczZF9kYmVfQmx1ZUNoZWVzZXJsdF9fbjdfZQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnYWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnaW5nTW9kZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZWdhdGVFeGVjdXRl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2T3ZlcnJpZGVFbmFibGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0b3J5SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNvbmZpZ0NhY2hl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVuZ2luZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUhvdENvbGQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1TSVBlZWs=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWxsb3dSdW4=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheU5hbWU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9jT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFByZXR0eVBhdGg=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFNob3dTdXBlckhpZGRlbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRDYWNoZVF1b3RhSW5LQg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJpdmVNYXNr","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RWRpdEZsYWdz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQW5jaG9yQ29udGV4dA==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTG9n","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU2hlbGxFeGVjdXRlSG9va3M=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdGluZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW52aXJvbm1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXZhbGF0aW9uRGF0YQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0YWJsZVR5cGVz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZURlc2NyaXB0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVN0cmVhbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVN5c3RlbUluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Zk1MRV9pc19icm9rZW4=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJvbUJhc2U2NFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJvbVhtbFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZlNhdmVXaW5kb3dQb3NpdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R0NTdHJlc3NTdGFydA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R0NTdHJlc3NTdGFydEF0Sml0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0N1cnJlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0RpcmVjdG9yeU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X01lc3NhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW51bWVyYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Rm9sZGVyUGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Tm9uWmVyb0J5dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3VpZEF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGFzTmF2aWdhdGlvbkVudW0=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZpbGVFeHQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZvbGRlclZlcmJz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUljb25z","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUluV2ViVmlldw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZU9uRGVza3RvcFBlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SWNvbnNPbmx5","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUNyeXB0b1RyYW5zZm9ybQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SURpc3Bvc2FibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUxEZXBlbmRlbmNpZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUxVc2FnZU1hc2s=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aU1hcmdpbkJvdHRvbQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aU1hcmdpbkxlZnQ=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aU1hcmdpblJpZ2h0","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aU1hcmdpblRvcA==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXgyMDE=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5oZXJpdENvbnNvbGVIYW5kbGVz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFJvb3Q=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdHJ1Y3Rpb25zLnR4dA==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuYWxOYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aVBvaW50U2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVB2NExvb3BiYWNrQWx0ZXJuYXRpdmU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SXNTaG9ydGN1dA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVdpbmRvd1Bvc0RY","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVdpbmRvd1Bvc0RZ","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVdpbmRvd1Bvc1g=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVdpbmRvd1Bvc1k=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Sl9uX3J1Y3QxMG5zLU4wdGVwYWQ=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFzdE1vZFRpbWU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF0ZXN0SW5kZXg=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGRhcENsaWVudEludGVncml0eQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5UG9saWN5VGltZVN0YW1w","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxDb3B5cmlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxUcmFkZW1hcmtz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGZDaGFyU2V0","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZDbGlwUHJlY2lzaW9u","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZFc2NhcGVtZW50","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZGYWNlTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZPcmllbnRhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZPdXRQcmVjaXNpb24=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZQaXRjaEFuZEZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZRdWFsaXR5","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZTdHJpa2VPdXQ=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZVbmRlcmxpbmU=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZXZWlnaHQ=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nRmFpbHVyZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nZ2luZ0xldmVs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nUmVzb3VyY2VCaW5kcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9va3MgbGlrZSBhbGwgeW91ciBkZXNrdG9wIGZpbGVzIGhhdmUgYmVlbiBlbmNyeXB0ZWQh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9va3MgbGlrZSBhbGwgeW91ciBkZXNrdG9wIGZpbGVzIGhhdmUgYmVlbiBlbmNyeXB0ZWQhVG8gZGVjcnlwdCwgc2VuZCAkNDAwIHRvIHRoZSBiaXRjb2luIHdhbGxldDogNDNJVTY0VUdHNjQ1RzM3STY3MElJVFlZUjUwOTNVNTVLSjVIRVJJUCBZb3VyIHBlcnNvbmFsIGZpbGVzIGlmIHlvdSBkb250IHBheS4uLg==","type":"Ansi","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJpdmVWZXJicw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJ2QnRu","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFydGFFeHRlbnNpb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW1pemVBcHBz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWF4aW11bVNhbHRMZW5ndGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWlzc2luZ0RlcGVuZGVuY2llcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZWkuZGxs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JsaWIsMi4wLjAuMCwsYjc3YTVjNTYxOTM0ZTA4OSxBTUQ2NA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JsaWIuSU5J","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TVNWQ1I4MC5kbGw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV2ZXJEZWZhdWx0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV2ZXJTaG93RXh0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV3R0NDYWxj","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TklEZXBlbmRlbmNpZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TklVc2FnZU1hc2s=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9DbGllbnRDaGVja3M=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db250cm9sUGFuZWw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9GaWxlRm9sZGVySnVuY3Rpb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9JbnRlcm5ldEljb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9OZXRDcmF3bGluZw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TZXRGb2xkZXJz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TaW1wbGVTdGFydE1lbnU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TdGF0aWNEZWZhdWx0VmVyYg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9XZWJWaWV3","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Xb3JraW5nRGlyZWN0b3J5","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T25seVVzZUxhdGVzdENMUg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3JpZ2luYWxGaWxlbmFtZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFkZGluZ01vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGVyY2VpdmVkVHlwZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGluVG9OYW1lU3BhY2VUcmVl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UEludm9rZUNhbGxpT3B0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UEludm9rZUlubGluZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdE5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGly","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmFuZG9tTnVtYmVyR2VuZXJhdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RlZEF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RSdW4=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmZjMjg5OERlcml2ZUJ5dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmlqbmRhZWxNYW5hZ2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UklQIFlvdXIgcGVyc29uYWwgZmlsZXMgaWYgeW91IGRvbnQgcGF5Li4u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Uk5HQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBRW5jcnlwdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBUHVibGlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZUNvbXBhdGliaWxpdHlBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c2FsdExlbmd0aExpbWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VhcmNoRGVza3RvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VwYXJhdGVQcm9jZXNz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X1BhZGRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V29ya2luZ0RpcmVjdG9yeUZyb21UYXJnZXQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxTdGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbXBDb2xvcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0luZm9UaXA=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1N1cGVySGlkZGVu","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1R5cGVPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2lhbEZvbGRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhdHVzQmFy","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3ltbWV0cmljQWxnb3JpdGht","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLDIuMC4wLjAsLGI3N2E1YzU2MTkzNGUwODksTVNJTA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbGxlY3Rpb25zLkdlbmVyaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbmZpZ3VyYXRpb24sMi4wLjAuMCwsYjAzZjVmN2YxMWQ1MGEzYSxNU0lM","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkRpYWdub3N0aWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLklOSQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLklP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJlZmxlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJTZXJ2aWNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuSW50ZXJvcFNlcnZpY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlhtbCwyLjAuMC4wLCxiNzdhNWM1NjE5MzRlMDg5LE1TSUw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3pUcmFpbGVy","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFpbENhbGxPcHQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VG8gZGVjcnlwdCwgc2VuZCAkNDAwIHRvIHRoZSBiaXRjb2luIHdhbGxldDogNDNJVTY0VUdHNjQ1RzM3STY3MElJVFlZUjUwOTNVNTVLSjVIRQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG9CYXNlNjRTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFVSTk9GRkRFQlVHSU5GTw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHVybk9mZlNQSUFuaW1hdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRHJvcEhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSG9zdG5hbWVBc0FsaWFz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlTGVnYWN5SWRlbnRpdHlGb3JtYXQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlTGVnYWN5VjJSdW50aW1lQWN0aXZhdGlvblBvbGljeURlZmF1bHRWYWx1ZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlT2xkSG9zdFJlc29sdXRpb25PcmRlcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"djIuMC41MDcyNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbmluZ0xvZw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNBbGlhc2VkTm90aWZpY2F0aW9ucw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JESVNQTEFZ","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JQQVJTSU5H","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNQYXJzZURpc3BsYXlOYW1l","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNVbml2ZXJzYWxEZWxlZ2F0ZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3JhcE5vbkV4Y2VwdGlvblRocm93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVBbGxMaW5lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVMaW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WTpcMi4gRGV2ZWxvcG1lbnQgUHJvamVjdHNcQXJjaGl2ZVxSYW5zb213YXJlXEJsdWVDaGVlc2VyXEJsdWVDaGVlc2VyXG9ialxEZWJ1Z1xCbHVlQ2hlZXNlci5wZGI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"JDExZDk3Yzc4LWMxYzgtNDA4Mi04ZWUwLTM4NzJkYWNkYzQ4ZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JVVTRVJQUk9GSUxFJVxEZXNrdG9wXEluc3RydWN0aW9ucy50eHQ=","type":"Ansi","source":"Process Commandline","process":null,"filename":"notepad.exe","compromised":null,"detection_total":null,"total":null},{"value":"MzFjZjUyNTNmNGExZDdkYjJmZjJkNTgwYjkyYjI1YmVjOWM0ZWY4NmZjMTVjMzZjZTI3NTMyZmI3M2RlOGRiZV9CbHVlQ2hlZXNlcldpbjcuZXhl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFxJbnN0cnVjdGlvbnMudHh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwNzc0LTc1MTY3MzQxMzE3MDkyNTExODQzNTg5NjU5NzUtMTY5MDU3ODg4My05NjM4NzcwNzctNTM1NDk0MjktOTMzMTQ4MTg3LTMwMDk4MDQ2","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"X0NvckV4ZU1haW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHkgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb21wYW55QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlEZXNjcmlwdGlvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlGaWxlVmVyc2lvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qmx1ZUNoZWVzZXIuZXhl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsYXRpb25SZWxheGF0aW9uc0F0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tVmlzaWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZWdhdGVFeGVjdXRl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0b3J5SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1TSVBlZWs=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU2hlbGxFeGVjdXRlSG9va3M=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0YWJsZVR5cGVz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZURlc2NyaXB0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVN5c3RlbUluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0N1cnJlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0RpcmVjdG9yeU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X01lc3NhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW51bWVyYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Rm9sZGVyUGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Tm9uWmVyb0J5dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFJvb3Q=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdHJ1Y3Rpb25zLnR4dA==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nRmFpbHVyZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nUmVzb3VyY2VCaW5kcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9va3MgbGlrZSBhbGwgeW91ciBkZXNrdG9wIGZpbGVzIGhhdmUgYmVlbiBlbmNyeXB0ZWQh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9va3MgbGlrZSBhbGwgeW91ciBkZXNrdG9wIGZpbGVzIGhhdmUgYmVlbiBlbmNyeXB0ZWQhVG8gZGVjcnlwdCwgc2VuZCAkNDAwIHRvIHRoZSBiaXRjb2luIHdhbGxldDogNDNJVTY0VUdHNjQ1RzM3STY3MElJVFlZUjUwOTNVNTVLSjVIRVJJUCBZb3VyIHBlcnNvbmFsIGZpbGVzIGlmIHlvdSBkb250IHBheS4uLg==","type":"Ansi","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZWkuZGxs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JsaWIsMi4wLjAuMCwsYjc3YTVjNTYxOTM0ZTA4OSxBTUQ2NA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JsaWIuSU5J","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Uk5HQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZUNvbXBhdGliaWxpdHlBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VwYXJhdGVQcm9jZXNz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V29ya2luZ0RpcmVjdG9yeUZyb21UYXJnZXQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbXBDb2xvcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0luZm9UaXA=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLDIuMC4wLjAsLGI3N2E1YzU2MTkzNGUwODksTVNJTA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbmZpZ3VyYXRpb24sMi4wLjAuMCwsYjAzZjVmN2YxMWQ1MGEzYSxNU0lM","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJTZXJ2aWNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuSW50ZXJvcFNlcnZpY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlhtbCwyLjAuMC4wLCxiNzdhNWM1NjE5MzRlMDg5LE1TSUw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFVSTk9GRkRFQlVHSU5GTw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbmluZ0xvZw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WTpcMi4gRGV2ZWxvcG1lbnQgUHJvamVjdHNcQXJjaGl2ZVxSYW5zb213YXJlXEJsdWVDaGVlc2VyXEJsdWVDaGVlc2VyXG9ialxEZWJ1Z1xCbHVlQ2hlZXNlci5wZGI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","strings":[{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JDExZDk3Yzc4LWMxYzgtNDA4Mi04ZWUwLTM4NzJkYWNkYzQ4ZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFxJbnN0cnVjdGlvbnMudHh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X0NvckV4ZU1haW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHkgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb21wYW55QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb25maWd1cmF0aW9uQXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlDb3B5cmlnaHRBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlEZXNjcmlwdGlvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlGaWxlVmVyc2lvbkF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlQcm9kdWN0QXR0cmlidXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlUaXRsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXNzZW1ibHlUcmFkZW1hcmtBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXN5bW1ldHJpY0FsZ29yaXRobQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qmx1ZUNoZWVzZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qmx1ZUNoZWVzZXIuZXhl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2lwaGVyTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGlsYXRpb25SZWxheGF0aW9uc0F0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tVmlzaWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weXJpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRW5jcnlwdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvU3RyZWFt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvU3RyZWFtTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnYWJsZUF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdnaW5nTW9kZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0b3J5SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdGluZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW52aXJvbm1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZURlc2NyaXB0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVN0cmVhbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVN5c3RlbUluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJvbUJhc2U2NFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJvbVhtbFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0N1cnJlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0RpcmVjdG9yeU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0X01lc3NhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW51bWVyYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Rm9sZGVyUGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Tm9uWmVyb0J5dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3VpZEF0dHJpYnV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUNyeXB0b1RyYW5zZm9ybQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SURpc3Bvc2FibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuYWxOYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxDb3B5cmlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxUcmFkZW1hcmtz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9va3MgbGlrZSBhbGwgeW91ciBkZXNrdG9wIGZpbGVzIGhhdmUgYmVlbiBlbmNyeXB0ZWQh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWF4aW11bVNhbHRMZW5ndGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JpZ2luYWxGaWxlbmFtZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFkZGluZ01vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdE5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmFuZG9tTnVtYmVyR2VuZXJhdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmZjMjg5OERlcml2ZUJ5dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmlqbmRhZWxNYW5hZ2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UklQIFlvdXIgcGVyc29uYWwgZmlsZXMgaWYgeW91IGRvbnQgcGF5Li4u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Uk5HQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBQ3J5cHRvU2VydmljZVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBRW5jcnlwdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBUHVibGlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZUNvbXBhdGliaWxpdHlBdHRyaWJ1dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2FsdExlbmd0aExpbWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VhcmNoRGVza3RvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0Jsb2NrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X0tleVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0X1BhZGRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2lhbEZvbGRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3ltbWV0cmljQWxnb3JpdGht","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbGxlY3Rpb25zLkdlbmVyaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkRpYWdub3N0aWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLklP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJlZmxlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuQ29tcGlsZXJTZXJ2aWNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlJ1bnRpbWUuSW50ZXJvcFNlcnZpY2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlNlY3VyaXR5LkNyeXB0b2dyYXBoeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG8gZGVjcnlwdCwgc2VuZCAkNDAwIHRvIHRoZSBiaXRjb2luIHdhbGxldDogNDNJVTY0VUdHNjQ1RzM3STY3MElJVFlZUjUwOTNVNTVLSjVIRQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG9CYXNlNjRTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"djIuMC41MDcyNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JhcE5vbkV4Y2VwdGlvblRocm93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVBbGxMaW5lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVMaW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WTpcMi4gRGV2ZWxvcG1lbnQgUHJvamVjdHNcQXJjaGl2ZVxSYW5zb213YXJlXEJsdWVDaGVlc2VyXEJsdWVDaGVlc2VyXG9ialxEZWJ1Z1xCbHVlQ2hlZXNlci5wZGI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe.bin","compromised":null,"detection_total":null,"total":null}]},{"name":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe:3704","strings":[{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MzFjZjUyNTNmNGExZDdkYjJmZjJkNTgwYjkyYjI1YmVjOWM0ZWY4NmZjMTVjMzZjZTI3NTMyZmI3M2RlOGRiZV9CbHVlQ2hlZXNlcldpbjcuZXhl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MzFjZjUyNTNmNGExZDdkYjJmZjJkNTgwYjkyYjI1YmVjOWM0ZWY4NmZjMTVjMzZjZTI3NTMyZmI3M2RlOGRiZV9CbHVlQ2hlZXNlcldpbjcuSU5J","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwNzc0LTc1MTY3MzQxMzE3MDkyNTExODQzNTg5NjU5NzUtMTY5MDU3ODg4My05NjM4NzcwNzctNTM1NDk0MjktOTMzMTQ4MTg3LTMwMDk4MDQ2","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dlZFJlc2VydmVkQ2hhcmFjdGVycw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dGaWxlQ0xTSURKdW5jdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzU2hvd0V4dA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0NoZWNrU2VsZWN0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnJvd3NlSW5QbGFjZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVMb2NhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbEZvckF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3NpY1NoZWxs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0xSTG9hZExvZ0Rpcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlnTWFzaw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlnU3RyaW5n","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudCBUeXBl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVsZWdhdGVFeGVjdXRl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2T3ZlcnJpZGVFbmFibGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNvbmZpZ0NhY2hl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVuZ2luZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUhvdENvbGQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1TSVBlZWs=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWxsb3dSdW4=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheU5hbWU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9jT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFByZXR0eVBhdGg=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFNob3dTdXBlckhpZGRlbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRDYWNoZVF1b3RhSW5LQg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJpdmVNYXNr","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RWRpdEZsYWdz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTG9n","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU2hlbGxFeGVjdXRlSG9va3M=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXZhbGF0aW9uRGF0YQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0YWJsZVR5cGVz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R0NTdHJlc3NTdGFydA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R0NTdHJlc3NTdGFydEF0Sml0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGFzTmF2aWdhdGlvbkVudW0=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZpbGVFeHQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZvbGRlclZlcmJz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUljb25z","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUluV2ViVmlldw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZU9uRGVza3RvcFBlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SWNvbnNPbmx5","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUxEZXBlbmRlbmNpZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUxVc2FnZU1hc2s=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXgyMDE=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5oZXJpdENvbnNvbGVIYW5kbGVz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFJvb3Q=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVB2NExvb3BiYWNrQWx0ZXJuYXRpdmU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SXNTaG9ydGN1dA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFzdE1vZFRpbWU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF0ZXN0SW5kZXg=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGRhcENsaWVudEludGVncml0eQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5UG9saWN5VGltZVN0YW1w","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nRmFpbHVyZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nZ2luZ0xldmVs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9nUmVzb3VyY2VCaW5kcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9va3MgbGlrZSBhbGwgeW91ciBkZXNrdG9wIGZpbGVzIGhhdmUgYmVlbiBlbmNyeXB0ZWQhVG8gZGVjcnlwdCwgc2VuZCAkNDAwIHRvIHRoZSBiaXRjb2luIHdhbGxldDogNDNJVTY0VUdHNjQ1RzM3STY3MElJVFlZUjUwOTNVNTVLSjVIRVJJUCBZb3VyIHBlcnNvbmFsIGZpbGVzIGlmIHlvdSBkb250IHBheS4uLg==","type":"Ansi","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJpdmVWZXJicw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJ2QnRu","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFydGFFeHRlbnNpb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW1pemVBcHBz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWlzc2luZ0RlcGVuZGVuY2llcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZWkuZGxs","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JsaWIsMi4wLjAuMCwsYjc3YTVjNTYxOTM0ZTA4OSxBTUQ2NA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JsaWIuSU5J","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TVNWQ1I4MC5kbGw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV2ZXJEZWZhdWx0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV2ZXJTaG93RXh0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV3R0NDYWxj","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TklEZXBlbmRlbmNpZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TklVc2FnZU1hc2s=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9DbGllbnRDaGVja3M=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db250cm9sUGFuZWw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9GaWxlRm9sZGVySnVuY3Rpb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9JbnRlcm5ldEljb24=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9OZXRDcmF3bGluZw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TZXRGb2xkZXJz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TaW1wbGVTdGFydE1lbnU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TdGF0aWNEZWZhdWx0VmVyYg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9XZWJWaWV3","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Xb3JraW5nRGlyZWN0b3J5","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T25seVVzZUxhdGVzdENMUg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGVyY2VpdmVkVHlwZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGluVG9OYW1lU3BhY2VUcmVl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UEludm9rZUNhbGxpT3B0","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UEludm9rZUlubGluZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGly","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RlZEF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RSdW4=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VwYXJhdGVQcm9jZXNz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0V29ya2luZ0RpcmVjdG9yeUZyb21UYXJnZXQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxTdGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbXBDb2xvcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0luZm9UaXA=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1N1cGVySGlkZGVu","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1R5cGVPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLDIuMC4wLjAsLGI3N2E1YzU2MTkzNGUwODksTVNJTA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLkNvbmZpZ3VyYXRpb24sMi4wLjAuMCwsYjAzZjVmN2YxMWQ1MGEzYSxNU0lM","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLklOSQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtLlhtbCwyLjAuMC4wLCxiNzdhNWM1NjE5MzRlMDg5LE1TSUw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFpbENhbGxPcHQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFVSTk9GRkRFQlVHSU5GTw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRHJvcEhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSG9zdG5hbWVBc0FsaWFz","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlTGVnYWN5SWRlbnRpdHlGb3JtYXQ=","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlTGVnYWN5VjJSdW50aW1lQWN0aXZhdGlvblBvbGljeURlZmF1bHRWYWx1ZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlT2xkSG9zdFJlc29sdXRpb25PcmRlcg==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbmluZ0xvZw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNBbGlhc2VkTm90aWZpY2F0aW9ucw==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JESVNQTEFZ","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JQQVJTSU5H","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNQYXJzZURpc3BsYXlOYW1l","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNVbml2ZXJzYWxEZWxlZ2F0ZQ==","type":"Unicode","source":"Runtime Data","process":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"notepad.exe","strings":[{"value":"JVVTRVJQUk9GSUxFJVxEZXNrdG9wXEluc3RydWN0aW9ucy50eHQ=","type":"Ansi","source":"Process Commandline","process":null,"filename":"notepad.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_2.png","strings":[{"value":"OF9fX19fX19fX19fX19fX19fX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18nX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X25fcnVjdF9vbl8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"Q1VsY2Y1bDUzZjRhbGQ3ZGJsX2xkNTgwYjlsYmw1YmVjOWM0ZWY4amZjbDVjM2pjXzc1M2xmYjczZF9kYmVfQmx1ZUNoZWVzZXJsdF9fbjdfZQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_4.png","strings":[{"value":"OTBfX19fX19fYw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fPz9fZV8wXz9fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX192P19fX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"XzAwPzBfX19fX3ZnMF8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X18wX19fX19fcV8/","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX18wXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"Sl9uX3J1Y3QxMG5zLU4wdGVwYWQ=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"X19fX19fX18wXz9sX19sX19fX19fcV9fX18/X18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X19pLCw/X2FfLGknLDA=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]},{"name":"notepad.exe:2460","strings":[{"value":"RGF0YUZpbGVQYXRo","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQW5jaG9yQ29udGV4dA==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Zk1MRV9pc19icm9rZW4=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZlNhdmVXaW5kb3dQb3NpdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aU1hcmdpbkJvdHRvbQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aU1hcmdpbkxlZnQ=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aU1hcmdpblJpZ2h0","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aU1hcmdpblRvcA==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdHJ1Y3Rpb25zLnR4dA==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVBvaW50U2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVdpbmRvd1Bvc0RY","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVdpbmRvd1Bvc0RZ","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVdpbmRvd1Bvc1g=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aVdpbmRvd1Bvc1k=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZDaGFyU2V0","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZDbGlwUHJlY2lzaW9u","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZFc2NhcGVtZW50","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZGYWNlTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZPcmllbnRhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZPdXRQcmVjaXNpb24=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZQaXRjaEFuZEZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZRdWFsaXR5","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZTdHJpa2VPdXQ=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZVbmRlcmxpbmU=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGZXZWlnaHQ=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RhdHVzQmFy","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3pUcmFpbGVy","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHVybk9mZlNQSUFuaW1hdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"notepad.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]}],"image":[]},"http_requests":[],"ftp_requests":[],"irc_requests":[],"strings_resources":["Y:\\2. Development Projects\\Archive\\Ransomware\\BlueCheeser\\BlueCheeser\\obj\\Debug\\BlueCheeser.pdb"],"tags_details":[],"sample_flags":["Extracted Files"],"suricata_alerts":[],"version_info":[{"id":"Translation","value":"0x0000 0x04b0"},{"id":"LegalCopyright","value":"Copyright 2018"},{"id":"Assembly Version","value":"1.0.0.0"},{"id":"InternalName","value":"BlueCheeser.exe"},{"id":"FileVersion","value":"1.0.0.0"},{"id":"CompanyName","value":null},{"id":"LegalTrademarks","value":null},{"id":"Comments","value":null},{"id":"ProductName","value":"BlueCheeser"},{"id":"ProductVersion","value":"1.0.0.0"},{"id":"FileDescription","value":"BlueCheeser"},{"id":"OriginalFilename","value":"BlueCheeser.exe"}],"apk_info":null,"apps_info":[{"name":"Access","product":null,"version":null},{"name":"Acrobat Reader","product":"Adobe Acrobat Reader DC","version":"18.9.20050.254034"},{"name":"Chrome","product":null,"version":null},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.4756.1000"},{"name":"Firefox","product":"Firefox","version":"57.0.1"},{"name":"Flash","product":"Shockwave Flash","version":"27,0,0,187"},{"name":"Hancom Office Hancell","product":null,"version":null},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.9600.16428"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1510.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.4763.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.4754.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.4762.1000"}],"architecture":"32 Bit","document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":"Microsoft visual C# v7.0 / Basic .NET","file_imports":[{"module":"mscoree.dll","functions":["_CorExeMain"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[],"language":"NEUTRAL","authentihash":"39cf33718b6ecd4b4da5557acb3d25b941ff1efa2153efbdfb08c7d2c15136b9","entrypoint_bytes":null,"pdb_timestamp":"2019-11-18T17:21:29+00:00","pdb_pathway":"Y:\\2. Development Projects\\Archive\\Ransomware\\BlueCheeser\\BlueCheeser\\obj\\Debug\\BlueCheeser.pdb","pdb_guid":"B99134BA340F43A3A6763FDF0A6BC959","file_sections":[{"name":".text","entropy":5.0172339571,"virtual_address":"0x2000","virtual_size":"0x1658","raw_size":"0x1800","md5":"a2b9278133f39f97dc595410558242e7","characteristics":[]},{"name":".rsrc","entropy":4.09034861834,"virtual_address":"0x4000","virtual_size":"0x5bc","raw_size":"0x600","md5":"2a8bdcd70cd45be4ae0198a165ea33a5","characteristics":[]},{"name":".reloc","entropy":0.0815394123432,"virtual_address":"0x6000","virtual_size":"0xc","raw_size":"0x200","md5":"3ce4215caa7ba1f15914444bbdb4ecd4","characteristics":[]}],"file_exports":[],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[{"name":"RT_VERSION","rva":"0x4090","size":"0x32c","type":"data","language":"neutral"},{"name":"RT_MANIFEST","rva":"0x43cc","size":"0x1ea","type":"XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators","language":"neutral"}],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[],"email_headers":null,"classification_tags":["ransomware"],"tags":["ransomware"],"submissions":[{"submission_id":"5e3d693168f77f0e9918b6db","filename":"BlueCheeser.bin","url":null,"created_at":"2020-02-07T13:42:09+00:00"},{"submission_id":"5e38479a3f4ec4253646eb46","filename":"31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe_BlueCheeserWin7.exe","url":null,"created_at":"2020-02-03T16:17:30+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Not all Falcon MalQuery lookups completed in time","Not all sources for indicator ID \"api-55\" are available in the report","Not all sources for indicator ID \"hooks-8\" are available in the report"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5e38479a3f4ec4253646eb47/download/files/report_json","file_size":237867},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5e38479a3f4ec4253646eb47/download/files/memory_strings","file_size":3404},"certificate":null,"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5e38479a3f4ec4253646eb47/download/files/network_pcap","file_size":438},"memory_dumps":null},"system_resource_monitor":{"cpu_usage":[{"x":0,"y":26.25},{"x":1,"y":9.60937},{"x":2,"y":82.1719},{"x":3,"y":12.3437},{"x":4,"y":10.9375},{"x":5,"y":10.625},{"x":6,"y":13.9844},{"x":7,"y":9.92188},{"x":8,"y":10},{"x":9,"y":10.3906},{"x":10,"y":10.0781}],"memory_usage":[{"x":0,"y":19.5889},{"x":1,"y":19.5395},{"x":2,"y":19.4639},{"x":3,"y":19.3914},{"x":4,"y":19.3834},{"x":5,"y":20.5542},{"x":6,"y":20.2873},{"x":7,"y":20.2056},{"x":8,"y":20.1967},{"x":9,"y":20.2823},{"x":10,"y":20.1295}],"disk_read":[{"x":0,"y":2730850},{"x":1,"y":636310},{"x":2,"y":460706},{"x":3,"y":216672},{"x":4,"y":23209.7},{"x":5,"y":22504.3},{"x":6,"y":59204.7},{"x":7,"y":0},{"x":8,"y":1766.52},{"x":9,"y":10812.2},{"x":10,"y":0}],"disk_write":[{"x":0,"y":3348040},{"x":1,"y":1945570},{"x":2,"y":1206310},{"x":3,"y":609445},{"x":4,"y":124620},{"x":5,"y":72922.7},{"x":6,"y":232581},{"x":7,"y":4592.1},{"x":8,"y":9053.42},{"x":9,"y":47979.2},{"x":10,"y":4816.04}],"network_packets":[{"x":0,"y":18.0967},{"x":1,"y":7.04608},{"x":2,"y":7.35427},{"x":3,"y":13.4396},{"x":4,"y":16.613},{"x":5,"y":2.32448},{"x":6,"y":1.35895},{"x":7,"y":15.2686},{"x":8,"y":25.122},{"x":9,"y":8.32521},{"x":10,"y":2.37861}],"page_file":[{"x":0,"y":304067000},{"x":1,"y":301834000},{"x":2,"y":299721000},{"x":3,"y":297767000},{"x":4,"y":297578000},{"x":5,"y":300757000},{"x":6,"y":295743000},{"x":7,"y":293609000},{"x":8,"y":293376000},{"x":9,"y":295821000},{"x":10,"y":293704000}]},"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe","933e1778b2760b3a9194c2799d7b76052895959c3caedefb4e9d764cbb6ad3b5"]}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Gen:Heur.Ransom.Imps — Falcon Sandbox Report — Score 100/100 — Sample 31cf5253f4a1… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sandbox report 5e38479a3f4e…. Malware family: Gen:Heur.Ransom.Imps. Threat score 100/100. 3 malicious and 12 suspicious behavioral indicators across 29 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe/5e38479a3f4ec4253646eb47"}],["$","meta","4",{"property":"og:title","content":"Malicious Gen:Heur.Ransom.Imps — Falcon Sandbox Report — Score 100/100 — Sample 31cf5253f4a1… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sandbox report 5e38479a3f4e…. Malware family: Gen:Heur.Ransom.Imps. Threat score 100/100. 3 malicious and 12 suspicious behavioral indicators across 29 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/31cf5253f4a1d7db2ff2d580b92b25bec9c4ef86fc15c36ce27532fb73de8dbe/5e38479a3f4ec4253646eb47"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Gen:Heur.Ransom.Imps — Falcon Sandbox Report — Score 100/100 — Sample 31cf5253f4a1… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sandbox report 5e38479a3f4e…. Malware family: Gen:Heur.Ransom.Imps. Threat score 100/100. 3 malicious and 12 suspicious behavioral indicators across 29 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2c","11",{}]]