24:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/3h6zdc-it88if.js","/_next/static/chunks/2vw2j18d9u3gs.js","/_next/static/chunks/3l_wb6il5gi_h.js"],"ReportDetailWrapper"] 2b:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T510,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic — Falcon Sandbox Report — Score 100/100 — Sample 3e3bb3fa7052…","description":"Malicious verdict for sandbox report 5df61fa2ba92…. Malware family: Trojan.Generic. Threat score 100/100. 6 malicious and 13 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/3e3bb3fa705247fdd41c0a73a52683049948e383b082fc6c7e0fba06cf9097bc/5df61fa2ba9297590d2cc51a","keywords":["Malicious","Trojan.Generic","sandbox report","malware analysis","MITRE ATT\u0026CK","3e3bb3fa705247fdd41c0a73a52683049948e383b082fc6c7e0fba06cf9097bc"],"about":{"@type":"SoftwareApplication","name":"TheDMR.exe","applicationCategory":"PE32 executable (console) Intel 80386, for MS Windows, UPX compressed","identifier":"3e3bb3fa705247fdd41c0a73a52683049948e383b082fc6c7e0fba06cf9097bc","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","sandboxEnvironment":"Windows 7 32 bit","behavioralIndicators":{"malicious":6,"suspicious":13,"totalSignatures":42},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T570,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26:T4c9,"" queries volume information of "C:\" at 00019682-00003236-0000010C-3979073592 "" queries volume information of "C:\" at 00019682-00003236-0000010C-150461719922 "" queries volume information of "C:\" at 00019682-00003236-0000010C-286666645990 "mshta.exe" queries volume information of "C:\Windows\Fonts\tahomabd.ttf" at 00024086-00001932-0000010C-153071345705 "mshta.exe" queries volume information of "C:\Windows\Fonts\tahomabd.ttf" at 00024086-00001932-0000010C-153138191042 "mshta.exe" queries volume information of "C:\Windows\Fonts\tahoma.ttf" at 00024086-00001932-0000010C-153165823939 "mshta.exe" queries volume information of "C:\Windows\Fonts\tahoma.ttf" at 00024086-00001932-0000010C-153173004625 "mshta.exe" queries volume information of "C:\Windows\Fonts\wingding.ttf" at 00024086-00001932-0000010C-153247715104 "mshta.exe" queries volume information of "C:\Windows\Fonts\wingding.ttf" at 00024086-00001932-0000010C-153252779297 "mshta.exe" queries volume information of "C:\Windows\Fonts\tahomabd.ttf" at 00028214-00001752-0000010C-273674623276 "mshta.exe" queries volume information of "C:\Windows\Fonts\tahoma.ttf" at 00028214-00001752-0000010C-27368020028327:T570,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAD2UlEQVR42u2X21cTVxTG/b/6jlatFbkoeI1oi66FS0EEBF2QkHsgxgAWCYZwCYEQkNraSu2rLcQ++NQ+6Ru+EHKbWy74uc8MSQY6Y4i69IWz1rfO5Mxl//Z39jkzOXBgv33tZnW60ddv+6LqtzhQBLDYHPjv9Tpe/fuG9Pqz6sdOj2bPIEoO2Afx12r0k7S69hJr0X+w9lLRKh3/TWNMWtfvADCZHUjzIrIZCRlJ/Agp90ka2n0tiyFkcrsB7PLgl9T/AHL5vHxiZeUFnv/5ak9a+eMF8rmsrGg0qqlC5t9cmZDFjjUB8tsA7ME1PQuovRNGXe886o1zOGkO4ZQ1hEZnEI0DMzjjmcJZ76R87dv1dWREvuw0VQRwwbYMg+MxDM4lNA0u4pIngsveBfwwMo/m0Tlc8YVw1T+rAuA+zQH2Y0sF0OL9FS3Dv+Dagye4/pDkW0ar/zHaAku4Ob2I9mAEHXPhIkCWAJQiFJReFDQdqDIN6wNwglgE6Bh/hi7/7+gK/Ibu6ae4QcGv+cNoHg/i4pgfBt84miZ8JQCBL+sAC378gVMfIMUJRQBj8DnuzjxD01AIx2xjOGgZwreO+zgy4MHRe24c8w7g+IhTBcAVM5cK/S4XWPDGmd69AbQ++hlHzKOo6h/GIZsXh50UfPAevrs/iO+HXfLDTjy0qwDSZR1gwZuftugDpFUAVcYRJWs7BS9mTcFHXKj+yYETYzbUPrLsqAGJNiNR0F8NLPiHAfgSwCHrtuUsaw8FHxqQs64etaPGZ0Wd34yTAVNpFQjlV8EeAEpFeNhFWbtVlrOsyfLacSvqJ/pxatKIBrK0CMBzFW3jZQHUhVY96kANWV5HltcHKPhUH83nXZwJ9VS0D1QEoC602oLlkyY0TPfidPAOzs5143y4cwdAZnsFfBYH1IUmWz5lVLKe7cG5+ds4v9AJw2J7EUCkGmAFqLUBsTGBzqVSKSQSCSQT8fIA6kJrmO6jrJnl3TgX7sKFSAcuLrWjabmtCCB9YBlKIj2XAJPJBOLxOBLxTR0A1U6oLrTTs8zy27LlhsgtCn4Tl5ZbcfnJdRVASjP7ggM8FSnLPBaLYXMzpg3AC8qHwuTU4p5fxxOBiDIFvH4R8hyHdCpJgTcVgJgOQDKtOMDe7eyhlYhPlxxgPasHjksjlVbmnWW9sbEhSxcgnhLlVzK2MshKHIAskKexDI8cCVsSjb0jbZHyynlk8C6nFFlh/xcFARw5kqbgKco8QXOfVIm5oQvw1T7J2Dd6T5/5o7/xTXS/xe6C3eWG1eGG2eqEscw9N9puYf8f2X4rtPd75aQEj4uK3gAAAABJRU5ErkJggg==28:Td0c4,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29:T2efc,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2a:T2efc,PCFET0NUWVBFIEhUTUwgUFVCTElDICctVzNDRFREIEhUTUwgNC4wMUVOJyAnaHR0cDp3d3cudzMub3JnL1RSL2h0bWw0L3N0cmljdC5kdGQnPjxodG1sPjxoZWFkPjxtZXRhIGNoYXJzZXQ9J3dpbmRvd3MtMTI1MSc+PHRpdGxlPkFnZW50LkRNUkBwcm90b25tYWlsLmNvbTwvdGl0bGU+PHNjcmlwdCBsYW5ndWFnZT0nSlNjcmlwdCc+d2luZG93Lm1vdmVUbyg1MCwgNTApO3dpbmRvdy5yZXNpemVUbyhzY3JlZW4ud2lkdGggLSAxMDAsIHNjcmVlbi5oZWlnaHQgLSAxMDApOzwvc2NyaXB0PjxzdHlsZSB0eXBlPSd0ZXh0L2Nzcyc+Ym9keSB7Zm9udDogMTVweCBUYWhvbWEsIHNhbnMtc2VyaWY7bWFyZ2luOiAxMHB4O2xpbmUtaGVpZ2h0OiAyNXB4O2JhY2tncm91bmQ6IzQ4NDg0ODtjb2xvcjp3aGl0ZTt9LmJvbGQge2ZvbnQtd2VpZ2h0OiBib2xkO30ubWFyayB7YmFja2dyb3VuZDogIzRjNzE2NTtwYWRkaW5nOiAycHggNXB4O31pbWcge2Rpc3BsYXk6YmxvY2s7bWFyZ2luOmF1dG87fS5oZWFkZXIge3RleHQtYWxpZ246IGNlbnRlcjtmb250LXNpemU6IDMwcHg7bGluZS1oZWlnaHQ6IDUwcHg7Zm9udC13ZWlnaHQ6IGJvbGQ7bWFyZ2luLWJvdHRvbToyMHB4O30uaW5mbyB7YmFja2dyb3VuZDojNGM3MTY1O2JvcmRlci1ib3R0b206IDVweCBzb2xpZCAjM0U2MDU1O30uYWxlcnQge2JhY2tncm91bmQ6I0IzMTcxNztib3JkZXItdG9wOiAxMHB4IHNvbGlkICNGRjAwMDA7fS5wcml2YXRlIHtib3JkZXI6IDFweCBkYXNoZWQgIzAwMDtiYWNrZ3JvdW5kOiAjRkZGRkVGO30ubm90ZSB7aGVpZ2h0OiBhdXRvO3BhZGRpbmctYm90dG9tOiAxcHg7bWFyZ2luOiAxNXB4IDA7fS5ub3RlIC50aXRsZSB7Zm9udC13ZWlnaHQ6IGJvbGQ7dGV4dC1pbmRlbnQ6IDEwcHg7aGVpZ2h0OiAzMHB4O2xpbmUtaGVpZ2h0OiAzMHB4O3BhZGRpbmctdG9wOiAxMHB4O30ubm90ZSAubWFyayB7YmFja2dyb3VuZDogI0EyQTJCNTt9Lm5vdGUgdWwge21hcmdpbi10b3A6IDA7fS5ub3RlIHByZSB7bWFyZ2luLWxlZnQ6IDE1cHg7bGluZS1oZWlnaHQ6IDEzcHg7Zm9udC1zaXplOiAxM3B4O308L3N0eWxlPjwvaGVhZD48Ym9keT48aW1nIHNyYz0nZGF0YTppbWFnZS9wbmc7YmFzZTY0LGlWQk9SdzBLR2dvQUFBQU5TVWhFVWdBQUFJc0FBQUNNQ0FZQUFBQk1IRnBIQUFBQUFYTlNSMElBcnM0YzZRQUFBQVJuUVUxQkFBQ3hqd3Y4WVFVQUFBQUpjRWhaY3dBQURzTUFBQTdEQWNkdnFHUUFBQkZCU1VSQlZIaGU3WjBQZEZUVm5jZC85ODIvL0NXSi9Ba2toSmxKRk1WYWRVOHRTdjh0YkcydGRlM3VkbzNXaFNTQ20weEF5eDYzeCs2NmNzNmkzZDNhWGFwRkJUSUJKWmtnZUhDbDFkcWpwVjJscU8yaWJ2RVBSU3FZbVVRaEFZUVlRdjVNTXZQdTNqdnpTNDJRdlBkbTV2MmJOKzl6VG5pLzN5OGhlZlBlOTkzN3UvZmRQMkJqWTJOalkyTmpZMk5qWTJOalkyTmpvd29FanpsSmQ3Q2hScVIwRVFGU0lCSndZUGc4Q05Bb0JlRzBHOXk3S3dPdFF4ak9PU3d2bHQ1UVhXRjBXTGc5RHRRalVIb0ZFTElVdjVVcEVhRGtNWkhRcUNDS25iNlYyNTdHdUdXeG5GaU9iRmhlNVhER1Z3Q0Zpd21CVzFoSVNINUhGd2JZQlgxUUJIcmFIK2g0R0dPV3dSSmlpVHhXdjRqRXlNMFU2TzNNTFU1R2pZY0N2TW4rK2FXdk9YUVB1OURNelc2eVZpeWRtMjh0SjZMemZwWnZmSWU1MDVKUlUvTTdWZ1h1OGpXMXIwTS82OGc2c1VSYUc1WVNTbTlqaittMUdNbzJSUGIxWkZTRTcxKzhNblEwR2NvT3NrWXM0V0JkaUJCeUl5dk1TekZrQlY0bDFOSGtiZDU2RUgxVFkzcXhoRnNiZGhNS1gyRlZ2Z2REVnVTMVlWRzRaY0hLdGdqNnBzUzBZdm1ncFlFM2R4OWhaNWlQSWV0RFliOTN0R1FSV2YxSUZDT213cFJpaWJUVUgySm5kakc2T1FoNTB4ZG8vek4wVElPcHhOSVZySCtHSmE1L3lVdzkrMFpNQ2N1Q3o4YWo4Y3FMVmo5eEJrT0dZd3F4SEZoYjZ5NmFrODh2aXBYemtyUmdEODliL2tEb1NuUU54WEN4UkZycnRyRFQ0RDJ1cHMyZlRFRGNGd2c1MFRZTXcyN1F6cDIxam9Xbjh6OWtaekFiUXpheWtFZFpMdk5kZEhUSEVMRjhzS1gyZ25nOC94UzZOaWxCWGdqM2ROMjRaTzJlR0FaMFEzZXhkTGJVZjFjZ1lMbVhiSHBDS1p5QlljSHJ2NnZ0WXd6cGdxNnRqa2hyd3hwYktKbERDRXdqQldKZjc2YTZXUmpTQmQxS2xraXcvbC9ZNGQrVG5vMWFFS2V6MG52NzQ4ZlExUlROU3hiVzlDT1Jsb1kxekxTRm9nRTBGanNhM25TYkQxMU4wYnhraVFRYjdtVWY2ZC9RdGRFSUtncCt2OGJ2bGpRVmkxMzE2SXNMcUxjeTBOR05ydXBvSnBaRTFVUG9EOUExSFFOakFyeHp5ZzJqY1FMUFJnb2hUcWUrRk43aU1iaW1mQVE4RGdwWHpvaUNRN2RNTDNYaVREQTFHZ2xHazQvTlNwUTcyZUdScEdjZVJKWkEvZVpZUHZ3c1hJU1I5UGpNQmFNd3YzUVVGbGNNWThSTWtLZ29qSHFyRzNjY3g0QnFxQzZXOTRPMUpRN0kxN1g5TDhlUmZoZTgwRjBJaDlsUmJiNHhid2l1bnplSW5rbWc4S0kzRUxxV05iSFo0NkVlcW91RmxTcXFubUFtakxBcVp1dWhhWENvejQwUjdiaXVhZ2krNlRXUmFBaHA4elcxTDBkUEZWUVZDMnY1OURKWmw2TnJLSHQ3OHVIcDl6T3JibElsaitVMDl5ODhsY2h0eklEb0lIOWUvZmZ0ZTlITkdOWEVFZzdXQlFtUUpuUU41WUhmbDBIUGtERXZhVm5SbnlobHpGSTEwU0doVEszWEFxcDB5dEdkdFc0bWxFWjBEZVBNcUFEM3ZYNkJZVUxoVUZhb3ZOQmRBRC9OTUlsV0MxSWdxallZWEJXeGRQVWxFbHJWODU5VU9EYm9oQit5RXVWMGRNb3B5N3F5NTJnK0JBK1dvR2NvY3lMQnVoMW9aMFRHWW1Fbjh0L3NZT2lnNnROUkFSNStweFNHWXJxK0Y1WGw0R2szYkgzWERQUGZFaFB4TWlianE4dXFuNzlHMHhCNEt2blFXMlV3SERPMFlKdVNOMDk1NEhsV0xSa05hNldlUmpOdE1yckNYY0dHdHluUXo2SnJDR3YyVFUvMHhxYkxzbm5kSUxDclVPaUlzK1A1clppb0tFQTBMc0RlVXpPZ2F6RDltMzZqYnhDdW5XdnNhaDFPd1YwMXQzSExoK2ltVE5waUNiY3NXMDZJOERpNmh2REdpVHpvZUMvMWVmQk9Kb29HYnpkcjZzWXhvZ3d1cGNHWUU5cTc1aVVES2NCZkVhejd3c21FTUExazFCY0lwVDBvUHUxSGtnbmxVVFFOb1ljbHRPa0lKVkFkVG55bEtoUU92ODlGemhqY1VkTUpGeFdkVFFZVkVtZEtXLysyNFROdjNaMHRkUytoblRKcGlTVWNiSGlXSFF5dGlCL1lYNGFXTXZpTjVqZVpseXBxOFBYeUU0bmZsd3FSQVJlOGVOVFkvSVVRc2hqTmxFbXJVSXdFRzBaWW9XellISi8zUG5iQmhnUEtuOUpTOXlnc3JUcS9xbmF3T3NFN3M0RFY1ZkxQVEcvL0NKd2Rqb0hJTzFMT1ljUDcxV2dwWS8yWFRxSmxET3ltditvTmhMNkVybUpTTGxsWVZyM1pTS0Z3V3Y2Z3ZQK2lnRlViNXdyRjVSQmcvcHhpcUNrdlVpUVV6dXlTUExod2RsSGkvM0NSVFdSVmlpWE1iM3Z6MERJR0p2ZHIwRXlKTktvaHNSWU5RK2dhY0VxT1BabEluaENINVN5UkhXZGNKUDVaaFJoSkhTNFVMcGlpL0UvZVlQT3phZlFySDZTMjg0amh2YnNPVmp1azNGR1hrbGpDTGZXM3NQOWlhTGZrL3BQS244cHZWZlNpQmVCeENobUo1RndxU3ZNU3dodkhMWWd3dzZOczhRTSsrZkw0a0xFOXpaVFN2MEJUTVNtSmhSQmFoNlloOE1GTEx4MVQxbGxjWFRnSU0vSG1GYmdkTERkUlR5Z1RtU2lZdjZub1FVdWVJLzNhRDV1UWdoQ1kxZG15N0FwMEZhRllMSWNmWHo2VC9Za2IwRFdFazhQS244WkYwNU1kbHZsTUtIT25hOXNDR1JjTUwxMHVLMUcyNk1HdXNEYmlUUVhXTW1MNXAzSVVpOFU1R3I4WFRjUG9IMVVtbGpsNUkxRHFHZ00zcTNxcU5CYktPRHo1NVZ4VjJwYzR5aEVUQ1l5eEx5TWhRRDZQcGlJVWk0VVE4VFkwRFdQREFXWHAwdVg0ZEZlVTZmZCtVMkRsZW5HK0V3cWRrNzgybUF3OVJ2REprV3pkS2tPUldMbzJOM3lPL2FncDNyY3JvYXBnQ0VvS1hJbVNSVS9LV2ZPYTg5V1p4dmFqcEFTQmhXakpvdWhxaWlLOUNVM0Q0TjNsU3ZHdzNHRjZrZjVkUWJ4MG1WSHNnVkwzR0VhaytXaEVYekZQQ29YTDN3ZzJLUnJKcnVoc1djMjZDazNER0lrcnU3RFRYREVvem5PQzA2REpQYnhFY3hHKzFLMDhmemh0am9XdVp0Q1JuNkFwaWV3ZDZIcmtPeFhzWVBnSW5qR0Y3LzJxQzg5Q1VaNzZVejZVd2p2dGlsektUalk4WVBoaVRra0l6RWRMRWxteFVMZGJyVjAwTWtKcExlUm15V1ZobnJFZFhwVmx5am9PZVl2SUpId1ZqNUxJbCsyRVhJcFdsa0FUdVlPUnVNdzh2M1Z5eUFmQnBiS0QyR1EvRld0YThUSlZXY0tnS2dUS0Z0MEt4SkZzWGtiWlUvakdDZms2dmp3dkNoZVdwcEFOYTBCTXBMRHZoTEptK3hkbmo2REZQdU9Kd3pENDNxdm82UXVsc05uZkhKS2N5aU1wbHFQQnBvSXhHTkYxQWt6WjFUZEQ4V2V1QmVJMFIvSm5CTkhqaDZIM0dkMVhLZG51QzRRa1V3N0pFb01KNWUvUTFJVVppNXRnMmhVMzVMUlFPSjd5aThEYjJJYWVic2gyajBoWEwxVGZjU3VGODcrQWxnMS8wemQzbWE3TDc4bDJKMHVMaFpEUG9hVTVzNzU1Ti9zMzZ4SkRUWEVVNk50cEh0bFVMN2xmZ0Z6aTJvQkh6ZkdVWDRpV3pVUm1mZU11dExTSEN0SkRVT1RFSXZkOTFSQmN4ZzQxTkN1dXNybG9hWThnTTFGRk56SFlaRDlUaWlXeXVjNlBwazJPSUFLVjNPTnA2cElsRHFiYkhNbEdXd2lGTDZJNUtWT0xSUkJ5WjdzNW13U3N0UzQ1MW5OS3NZaGkzQndMbmRqb0JtV3RkVFFueFU1d2JSUmppOFZHTWJaWWtPUEhUOEx1RjErQnR0Q1Q4Qi9yTnNHenorMU8rS0tvYk5SYkxqQmxKMHhueTdKNmdRanQ2R3FPdDBtM1AvVXBCczRPUW1qN0xuajIrVDBZT1ovVlRVdmhodXRUbnNDbkNyR0JqK0RvanUraHB6MitRR2hLVGVSMHlYSjJjQWh1cWxzdEtSVE93NjFQd0FNUHRxS1h1K1NzV0VhaVVmamJaY3IzcG56cDVYMndidjBXOUhLVEtjVkNCT2NvbXBaay9jWlBWM3RFY0lETFV3RHV2QUx3NUJjbGJKZm4wMTFOdjlyek96aldvL3IrQ1daQ2NtYi9sR0tobEdhOHVxRlpHUnVMd1l0Nzl5VnNRb1NFT1BJS3A0SFQ3UUdIeXdPQzA1V3duZTQ4eUM4dUF4Y1QwRGdQYjlSOVVKS2VTRDRKVTRyRkE1NVgwTFFjNHkwY1FnamtGWlVreENHRmt3bklVNUNjL0w3L3dIdUpvMFhaamNkSm1WSXNsWUZXWTlmaDFKQmRUejNGbGNLRW9ueXBNY0hoL0pOZytqODIxUTQ1cWtHQVNLNnFtSk1KN3ZzZm5HQlZ6eWZycWlpRkMwWmd1VTEwVk5uMFZLc2hLUllLdEF0TlM3RjYxUXAyNDlONzllVm0rYzNNR2RQUnN4WWlpSkwzVzFJc1JDQWIwTFFVbnZ6MDEyemhjNmlKd2tVTHN3MDM5RWwySmtsLzZqaTFaTjdpY2FjL0YvcStmMjVHeTNwVUJwNlR2Ti9TWWlGVTAzMkNqU1MwNFQ2MGxGUHNwbkRaSlJZZFdFNUFOdVdRRklzdnNPMFhhRnFPYWNXRnNQRS8vd2s5WllSYWY4UXVxalducTFBSy80UG1sQ2lwZkMzYmhLNllQUk9DUDc3bnZFV1F6Nld5ekFNL0M2M2p2ZG9Zc1I2Q1RMT1pJeXNXcHJqNzBiUWs1VE9udzE5OVdYcWhpSHUvWi9pT2ZwcmpEYlQvQTVwVElpc1dCeUhLMXVxMHlXWVUxUjZ5WXBrWGFOK0VwbzFGWVpYd3o5R1VSRW5Pd3RtUFIwdENKOW5wWXlJeTM4NTYyTWY3TlpxU0tCSUwrMlY4ZnlITEVwY1pPaWtucGl4SDlBVkNpZ2JxS0JLTFB4QmFpNllsOFZaTDd4ZFVVcGJhUmxqWkJBSDZQSnF5S0syR2VGSDh2MmhhRGwvTlJXaWRUMGxSUGhTWEdMNWRuV1lRQXR2UWxFV3hXTmh2M1ltVzVhanhWOEZWVjA3ZWZMNTd0ZUdyMEdzR3Exd0g1alYxUEltdUxJckY0ZyswUDhRT2xwMFhzZVlmVjBEOVRkZkJsUXQ4aVkybnJsdHlOZnpYdjk0SmwxMVNnejloUVNpOGpwWWlVdXE3amdUckgyT0hGVWxQWFl5YUNtSjJ0SndLNGcyRWVOKzE0dXhkZVRYRUVNZGlsdTdOelRFT3BTSVVUa3BpcWI1emV4ZjdBNVlkbTV0TFVFSlRIbXVSa2xnNGNSSDBteDVub3hVOS9xYU8zNkN0bUpURlVyMHk5QnByUnIrR3JrMFdRa1NTMWc2NktZdUZReDFnL2Rld0ZvV2xFYWU4Szl2VFd2TTlMYkZVTjRiZVpuLzEvOUJWQlNvcTNDTW14NGhGMVYwTm53cjB5MmltVEZwaTRaQlk3R3RvcWtKZjkwRzBiQ2J5K3RZMWFLbkNvSyt4NDEyMFV5WnRzWGhYYmUralFGUHExSkhpM2VlQ2FObU1FeHNaaEhoMEdMM01DZmQwWi9UZUltMnhjUHlCam9XOHl4amRqQmc2ZFF6T0hEMkNuZzNuNVo4RTBNb2NBclJqeWRvOU1YVFRJaU94Y0FZZExoK2FHY0c3a3ZkdCtUNmM2ZWxNQm5LY1gvK2dsdVVyUTZEV0ZDVnZvS01lemJUaDl5aGpJc0Y2UG1YRW0vVFM0OFBUd3pBVS9VVDRzeFpjQTUvOTlsMHFuV0YyTURaMEJsNVp2d3JFK0NmVFk4ZDNvOCtFczdIaDRzdnVlRXAyUUxZY3F0MEtKaGkrbmt2YXM3ZEVTdUZJYjhhZngxTHdXUWMxNWNtZDZETmdteThRa3R6QVFTbXFQcmRNTUJrTktUdldOd3huUnpLcVZpMUZwcVVLdXhrbi9ZSFFMSFF6UnFVYUVTSGtDYlRTb3FJc0g0cnluTGxVODB3S24wK3RSdlZUSUxobE44bE1CZFh2UzZTbC92ZnN0MmE4N24vLzhCajBEK2JXMGhaOHN1UGNDd29TeDB5aElDendCOW9Pb2FzS3FvdGw1ODVheDhLKy9INW1TcTREYjZNaEZPN3dOWWMyb3FjYW1wVDQ0YTIzbFpKUnNROWRHejJoWkkrdnVYMEplcXFpYnM2QytKZTNmVXhqd2h4MGJYUkNCSGhGSzZGd05CRUx4MzlIVzI4Y2FFWjlMemJLWVMyZnZkV0JVTm92Q1pXZ21WZzROWUdPYmdjVjVxTnJveEZjS0w2bTBHSjBOVU5Uc1hDcW10c09VeGhiZ0s2TnlsQks5M0Noc0JaVVJuMWNTdEJjTEJ4L1lNY2gzcFJEMTBZbHVGRDh6UjFMOUJBS1J4ZXhjSGliMzhVRlE4RFN5N3pyQlNIa1Yxd282T3FDYm1MaFZQSk9vaWk5aEptL1RVWnMwb0VDdmNmYjFQNTFkSFZEazM0V09lamF0VUxYN002bjJGLy9Ob1pzRkVMajhVWCtWVThZTXUvY0VMR00weFdzcTZWZzNUblVLaE1XNCtMMTFhdTIvUkY5M1RGVUxKenVZRU9OQ0pSUFhKdWRqTmljRDNuU0YyaS9GUjNETUZ3c0hNcUtsMGhyM1RNRXlJMFlza2tpc3RMa1VpTkxrNG5vbXVCT0JXLzYrUU1kMzJMWHBvTEoxNXBiYnFUT2RtOVB0Y3NzUXVHWW9tUTVsODZOOVpjTERuZ0wzWnpEQldNekt3TTdQa0xYTkpoU0xKeVgxaTUyK3VkVU1jRVE2VVZxcllSQXEzMk5IV0gwVElkcHhUS1JTR3Q5QkdobUE4Sk5UQnhFK0x4dlpjajBLNEptaFZqR0NRZnI5N0FUdm9hWm5tUWtlNkVBQXc1QnVHRmVZOXZMR0RJOVdTV1djU0tQclZnRXNkZ3VabVpiYzV2dmJuck1Hd2pWc0F1dnkvc2NOY2xLc1V3azNGci9BcUZ3QlRQTktod3VpajhTU243b2JXNFBKVVBaU2RhTFpSd2FiSEpGSVBvMG9mUkNFT0FTZG91TS9Hd2pJc0FCZ2NJT1gzUG9RWXhsUFpZUnk3bDB0ZFJkeGZUeUkvWUo4NWg3TmZ0S2IxTkVCYkNMZUlvUytnNnpQdkkxaGRKYUtDY2JzS3hZSnFQejBZYXZDRTU2OTUrNklrWGc0NFF2WlZlQko4eFNIWlJqcktUb1p6L3dKdnZaRVI2Z2xCNTBsczFZVzNYelErb3RjMkJqWTJOalkyTmpZMk5qWTJOak9nRCtIL0E0bUt6dFpOYlZBQUFBQUVsRlRrU3VRbUNDJz48ZGl2IGNsYXNzPSdoZWFkZXInPjxkaXY+QWxsIHlvdXIgZmlsZXMgaGF2ZSBiZWVuIGVuY3J5cHRlZCE8L2Rpdj48L2Rpdj48ZGl2IGNsYXNzPSdib2xkJz5Zb3VyIGRvY3VtZW50cywgcGhvdG9zLCBkYXRhYmFzZXMgYW5kIG90aGVyIGltcG9ydGFudCBmaWxlcyBoYXZlIGJlZW4gZW5jcnlwdGVkIHdpdGggc3Ryb25nZXN0IGVuY3J5cHRpb24uIHlvdSBjYW4gcmV0dXJuIGFsbCB5b3VyIGZpbGVzIGlmIHlvdSB3YW50IHRvIHJlc3RvcmUgZmlsZXMsIHdyaXRlIHVzIHRvIHRoZSBlLW1haWw6IDxzcGFuIGNsYXNzPSdtYXJrJz5BZ2VudC5ETVJAcHJvdG9ubWFpbC5jb208L3NwYW4+PC9kaXY+IDxkaXYgY2xhc3M9J2JvbGQnPldyaXRlIHRoaXMgSUQgaW4gdGhlIHN1YmplY3QgZS1tYWlsOjxzcGFuIGNsYXNzPSdtYXJrJz41Q0FFOEIzQjwvc3Bhbj48L2Rpdj48ZGl2Pk9ubHkgaW4gY2FzZSB5b3UgZG8gbm90IHJlY2VpdmUgYSByZXNwb25zZSBmcm9tIHRoZSBmaXJzdCBlbWFpbCBhZGRyZXNzIHdpdGhpdCA0OCBob3VycywgcGxlYXNlIHVzZSB0aGlzIGFsdGVybmF0aXZlIGVtYWlsIGFkcmVzczogPHNwYW4gY2xhc3M9J21hcmsnPkFnZW50LkRNUkBhb2wuY29tPC9zcGFuPjwvZGl2PjxkaXY+SXQgaXMgaW4geW91ciBpbnRlcmVzdCB0byByZXNwb25kIGFzIHNvb24gYXMgcG9zc2libGUgdG8gZW5zdXJlIHRoZSByZXN0b3JhdGlvbiBvZiB5b3VyIGZpbGVzLCBiZWNhdXNlIHdlIHdvbnQga2VlcCB5b3VyIGRlY3J5cHRpb24ga2V5cyBhdCBvdXIgc2VydmVyIG1vcmUgdGhhbiBvbmUgd2Vlay4gVGhlIHByaWNlIGRlcGVuZHMgb24gaG93IGZhc3QgeW91IHdyaXRlIHRvIHVzLjwvZGl2PjxkaXYgY2xhc3M9J25vdGUgaW5mbyc+PGRpdiBjbGFzcz0ndGl0bGUnPkZyZWUgZGVjcnlwdGlvbiBhcyBndWFyYW50ZWU8L2Rpdj48dWw+QmVmb3JlIHBheWluZyB5b3UgY2FuIHNlbmQgdXMgdXAgdG8gMSBmaWxlIGZvciBmcmVlIGRlY3J5cHRpb24uIFRoZSB0b3RhbCBzaXplIG9mIGZpbGVzIG11c3QgYmUgbGVzcyB0aGFuIDFNYiAobm9uIGFyY2hpdmVkKSwgYW5kIGZpbGVzIHNob3VsZCBub3QgY29udGFpbiB2YWx1YWJsZSBpbmZvcm1hdGlvbi4gKGRhdGFiYXNlcyxiYWNrdXBzLCBsYXJnZSBleGNlbCBzaGVldHMsIGV0Yy4pPC91bD48L2Rpdj48ZGl2IGNsYXNzPSdub3RlIGluZm8nPjxkaXYgY2xhc3M9J3RpdGxlJz5Ib3cgdG8gb2J0YWluIEJpdGNvaW5zPC9kaXY+PHVsPllvdSBjYW4gYnV5IGJpdGNvaW4gZnJvbSBoZXJlOjxicj48YSBocmVmPSdodHRwczpsb2NhbGJpdGNvaW5zLmNvbS9idXlfYml0Y29pbnMnPmh0dHBzOmxvY2FsYml0Y29pbnMuY29tL2J1eV9iaXRjb2luczwvYT48YnI+IEFsc28geW91IGNhbiBmaW5kIG90aGVyIHBsYWNlcyB0byBidXkgQml0Y29pbnMgYW5kIGJlZ2lubmVycyBndWlkZSBoZXJlOjxicj48YSBocmVmPSdodHRwOnd3dy5jb2luZGVzay5jb20vaW5mb3JtYXRpb24vaG93LWNhbi1pLWJ1eS1iaXRjb2lucy8nPmh0dHA6d3d3LmNvaW5kZXNrLmNvbS9pbmZvcm1hdGlvbi9ob3ctY2FuLWktYnV5LWJpdGNvaW5zLzwvYT48L3VsPjwvZGl2PjxkaXYgY2xhc3M9J25vdGUgYWxlcnQnPjxkaXYgY2xhc3M9J3RpdGxlJz5BdHRlbnRpb24hPC9kaXY+PHVsPjxsaT5EbyBub3QgcmVuYW1lIGVuY3J5cHRlZCBmaWxlcy48L2xpPjxsaT5Vc2luZyBhbm90aGVyIHRvb2xzIGNvdWxkIGNvcnJ1cHQgeW91ciBmaWxlcywgaW4gY2FzZSBvZiB1c2luZyB0aGlyZCBwYXJ0eSBzb2Z0d2FyZSB3ZSBkb24ndCBnaXZlIGd1YXJhbnRlZXMgdGhhdCBmdWxsIHJlY292ZXJ5IGlzIHBvc3NpYmxlIHNvIHVzZSBpdCBvbiB5b3VyIG93biByaXNrLjwvbGk+PC91bD48L2Rpdj48L2JvZHk+PC9odG1sPg==1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"job_id":"5df61fa2ba9297590d2cc51a","environment_id":100,"environment_description":"Windows 7 32 bit","size":196096,"type":"PE32 executable (console) Intel 80386, for MS Windows, UPX compressed","type_short":["peexe","executable"],"type_short_id":"exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"TheDMR.exe","md5":"c5d722182c82972a29fd7b67e9755a8a","sha1":"54c60fd5e05a7856e15d7a8219a063c3c1c92fef","sha256":"3e3bb3fa705247fdd41c0a73a52683049948e383b082fc6c7e0fba06cf9097bc","sha512":"43ded589496e88b3a0ff799205a22bc91bc767a35288ff4d2553aa729a437903a3be15f37a4e591447cd308c6aa0970ab819470ddc21e034b936f6ef686f18cb","ssdeep":"3072:uDmfjs0A36mifzxJLdmt9Hi20vSWgiWG20zJ8QRwQ+7hK05qITle0e8R35K4Pk34:uDP3Z+7dC9Hi9SWWIzJBOCITK8jD6cN","imphash":"0f4df32a9a84ad2473474a72b64f2934","entrypoint":"0x47f340","entrypoint_section":"UPX1","image_base":null,"subsystem":null,"image_file_characteristics":[],"dll_characteristics":[],"major_os_version":null,"minor_os_version":null,"av_detect":40,"vx_family":"Trojan.Generic","url_analysis":false,"analysis_start_time":"2019-12-15T11:57:37+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":false,"certificates_validation_message":"No signature was present in the subject. (0x800b0100)","domains":[],"compromised_hosts":[],"hosts":[],"total_network_connections":0,"total_processes":5,"total_signatures":42,"extracted_files":[{"name":"!!! READ THIS !!!.hta","file_path":"C:\\!!! READ THIS !!!.hta","file_size":9021,"md5":"feb2a0c911162e9e5dc13ff7148da562","sha1":"fcfc55841268cdc0d6e5b8fa5dab5148d5102cf2","sha256":"aba6cfb774b8a747d1c63a939037d1c8b429d615de62497e1d30d3cd786625ec","sha512":"6668521050a10c6dd3235f59240780102a71dc7d6633928b46b905f6e48c9475571b9a60bb74b8259e4c3cd3596a2f5429058a94392d5f320c84af6103f2ba82","type_tags":["html"],"description":"HTML document, ASCII text, with very long lines, with CRLF line terminators","runtime_process":"mshta.exe (PID: 1932)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5df61fa2ba9297590d2cc51a/download/dropped-file?key=45300b6ce4ea7d3859e296ab4bca8b6b2ac352ffaa6cbd75dd07f78cc70fab5ab348cb495e18a0a60aefcfaf54a0a190709aa2ed81cba68bbfb2e321ccc012cb1445c6de980a69806034ec72dbb282ed","submit_link":"/bff/report/5df61fa2ba9297590d2cc51a/submit/dropped-file?key=45300b6ce4ea7d3859e296ab4bca8b6b2ac352ffaa6cbd75dd07f78cc70fab5ab348cb495e18a0a60aefcfaf54a0a190709aa2ed81cba68bbfb2e321ccc012cb1445c6de980a69806034ec72dbb282ed","has_overview":false,"extended_details":null}],"file_metadata":{"file_compositions":["1 .OBJ Files (COFF) linked with LINK.EXE 5.10 (Visual Studio 5) (build: 28107)","1 Unknown Resource Files (build: 0)","3 .BAS Files compiled with C2.EXE 5.0 (Visual Basic 6) (build: 28107)"],"imported_objects":["34 .OBJ Files (OMF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 28107)","149 .OBJ Files (OMF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 27905)","25 .OBJ Files (OMF) linked with LINK.EXE 5.10 (Visual Studio 5) (build: 27905)","18 .OBJ Files (COFF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 27905)","24 .OBJ Files (COFF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 26715)","187 .OBJ Files (OMF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 26715)","21 .OBJ Files (OMF) linked with LINK.EXE 5.10 (Visual Studio 5) (build: 26715)"],"file_analysis":["File contains Visual Basic code","File appears to contain raw COFF/OMF content","File is the product of a small codebase (3 files)"],"total_file_compositions_imports":9},"processes":[{"uid":"00019682-00003236","parentuid":null,"name":"TheDMR.exe","normalized_path":"C:\\TheDMR.exe","command_line":null,"sha256":"3e3bb3fa705247fdd41c0a73a52683049948e383b082fc6c7e0fba06cf9097bc","av_label":"Trojan.Generic","av_matched":28,"av_total":69,"pid":"3236","icon":"$25","process_flags":[{"name":"Multiscan Match","data":"28/69"}]},{"uid":"00024083-00001724","parentuid":"00019682-00003236","name":"cmd.exe","normalized_path":"%WINDIR%\\System32\\cmd.exe","command_line":"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","av_label":null,"av_matched":null,"av_total":null,"pid":"1724","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00024086-00001932","parentuid":"00024083-00001724","name":"mshta.exe","normalized_path":"%WINDIR%\\System32\\mshta.exe","command_line":"\"C:\\\\!!! READ THIS !!!.hta\"","sha256":"949485ba939953642714ae6831d7dcb261691cac7cbb8c1a9220333801f60820","av_label":null,"av_matched":null,"av_total":null,"pid":"1932","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00028212-00001380","parentuid":"00019682-00003236","name":"cmd.exe","normalized_path":"%WINDIR%\\System32\\cmd.exe","command_line":"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"","sha256":"17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","av_label":null,"av_matched":null,"av_total":null,"pid":"1380","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00028214-00001752","parentuid":"00028212-00001380","name":"mshta.exe","normalized_path":"%WINDIR%\\System32\\mshta.exe","command_line":"\"C:\\\\!!! READ THIS !!!.hta\"","sha256":"949485ba939953642714ae6831d7dcb261691cac7cbb8c1a9220333801f60820","av_label":null,"av_matched":null,"av_total":null,"pid":"1752","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]}],"mitre_attcks":[{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attck_id":"T1215","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Opens the Kernel Security Device Driver (KsecDD) of Windows"],"parent":null},{"tactic":"Persistence","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Allocates virtual memory in a remote process"],"suspicious_identifiers_count":1,"suspicious_identifiers":["Writes data to a remote process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Allocates virtual memory in a remote process"],"suspicious_identifiers_count":1,"suspicious_identifiers":["Writes data to a remote process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Software Packing","attck_id":"T1045","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1045","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["PE file is packed with UPX"],"informative_identifiers_count":1,"informative_identifiers":["Matched Compiler/Packer signature"],"parent":null},{"tactic":"Defense Evasion","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Modifies proxy settings"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Credential Access","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":6,"suspicious_identifiers":["Reads the cryptographic machine GUID","Queries sensitive IE security settings","Reads information about supported languages","Reads the active computer name"],"informative_identifiers_count":1,"informative_identifiers":["Reads the registry for installed applications"],"parent":null},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attck_id":"T1120","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Queries volume information of an entire harddrive","Queries volume information"],"parent":null},{"tactic":"Discovery","technique":"Process Discovery","attck_id":"T1057","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1057","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"static-5","type":0,"relevance":10,"name":"PE file contains zero-size sections","description":"Raw size of \"UPX0\" is zero","description_v2":["Raw size of \"UPX0\" is zero"],"description_v3":[{"type":"text","value":"Raw size of \"UPX0\" is zero"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-11","type":6,"relevance":2,"name":"Queries volume information","description":"$26","description_v2":["\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-3979073592","\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-150461719922","\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-286666645990","\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahomabd.ttf\" at 00024086-00001932-0000010C-153071345705","\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahomabd.ttf\" at 00024086-00001932-0000010C-153138191042","\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahoma.ttf\" at 00024086-00001932-0000010C-153165823939","\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahoma.ttf\" at 00024086-00001932-0000010C-153173004625","\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\wingding.ttf\" at 00024086-00001932-0000010C-153247715104","\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\wingding.ttf\" at 00024086-00001932-0000010C-153252779297","\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahomabd.ttf\" at 00028214-00001752-0000010C-273674623276","\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahoma.ttf\" at 00028214-00001752-0000010C-273680200283"],"description_v3":[{"type":"text","value":"\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-3979073592"},{"type":"linebreak"},{"type":"text","value":"\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-150461719922"},{"type":"linebreak"},{"type":"text","value":"\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-286666645990"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" queries volume information of \"%WINDIR%\\Fonts\\tahomabd.ttf\" at 00024086-00001932-0000010C-153071345705"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahomabd.ttf\" at 00024086-00001932-0000010C-153138191042"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahoma.ttf\" at 00024086-00001932-0000010C-153165823939"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahoma.ttf\" at 00024086-00001932-0000010C-153173004625"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\wingding.ttf\" at 00024086-00001932-0000010C-153247715104"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\wingding.ttf\" at 00024086-00001932-0000010C-153252779297"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahomabd.ttf\" at 00028214-00001752-0000010C-273674623276"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" queries volume information of \"C:\\Windows\\Fonts\\tahoma.ttf\" at 00028214-00001752-0000010C-273680200283"}],"origin":"API Call","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-39","type":6,"relevance":8,"name":"Queries volume information of an entire harddrive","description":"\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-3979073592\n \"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-150461719922\n \"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-286666645990","description_v2":["\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-3979073592","\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-150461719922","\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-286666645990"],"description_v3":[{"type":"text","value":"\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-3979073592"},{"type":"linebreak"},{"type":"text","value":"\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-150461719922"},{"type":"linebreak"},{"type":"text","value":"\"\" queries volume information of \"C:\\\" at 00019682-00003236-0000010C-286666645990"}],"origin":"API Call","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-55","type":3,"relevance":10,"name":"Reads the registry for installed applications","description":"\"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\")\n \"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\"; Key: \"PATH\"; Value: \"00000000010000005800000043003A005C00500072006F006700720061006D002000460069006C00650073005C004D006900630072006F0073006F006600740020004F00660066006900630065005C004F0066006600690063006500310034005C000000\")","description_v2":["\"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\")","\"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\"; Key: \"PATH\"; Value: \"00000000010000005800000043003A005C00500072006F006700720061006D002000460069006C00650073005C004D006900630072006F0073006F006600740020004F00660066006900630065005C004F0066006600690063006500310034005C000000\")"],"description_v3":[{"type":"text","value":"\"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\OUTLOOK.EXE\"; Key: \"PATH\"; Value: \"00000000010000005800000043003A005C00500072006F006700720061006D002000460069006C00650073005C004D006900630072006F0073006F006600740020004F00660066006900630065005C004F0066006600690063006500310034005C000000\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\!IECompat!Mutex\"\n \"Local\\ZonesLockedCacheCounterMutex\"\n \"Local\\MSIMGSIZECacheMutex\"\n \"Local\\ZonesCacheCounterMutex\"\n \"!IECompat!Mutex\"","description_v2":["\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"","\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"","\"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex\"","\"\\Sessions\\1\\BaseNamedObjects\\!IECompat!Mutex\"","\"Local\\ZonesLockedCacheCounterMutex\"","\"Local\\MSIMGSIZECacheMutex\"","\"Local\\ZonesCacheCounterMutex\"","\"!IECompat!Mutex\""],"description_v3":[{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\!IECompat!Mutex\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\ZonesLockedCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\MSIMGSIZECacheMutex\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\ZonesCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"!IECompat!Mutex\""}],"origin":"Created Mutant","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-72","type":3,"relevance":3,"name":"Overview of unique CLSIDs touched in registry","description":"\"mshta.exe\" touched \"HTML Document\" (Path: \"HKCU\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\INPROCSERVER32\")\n \"mshta.exe\" touched \"Microsoft HTA Document 6.0\" (Path: \"HKCU\\CLSID\\{3050F5C8-98B5-11CF-BB82-00AA00BDCE0B}\")\n \"mshta.exe\" touched \"Microsoft HTML About Pluggable Protocol\" (Path: \"HKCU\\CLSID\\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\")\n \"mshta.exe\" touched \"Multi Language Support\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{275C23E2-3747-11D0-9FEA-00AA003F8646}\")\n \"mshta.exe\" touched \"CActiveIMMAppEx_Trident\" (Path: \"HKCU\\CLSID\\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\\TREATAS\")\n \"mshta.exe\" touched \"PSOAInterface\" (Path: \"HKCU\\CLSID\\{00020424-0000-0000-C000-000000000046}\\TREATAS\")\n \"mshta.exe\" touched \"JScript Language\" (Path: \"HKCU\\CLSID\\{16D51579-A30B-4C8B-A276-0FF4DC41E755}\\TREATAS\")\n \"mshta.exe\" touched \"Microsoft Url History Service\" (Path: \"HKCU\\CLSID\\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\\TREATAS\")","description_v2":["\"mshta.exe\" touched \"HTML Document\" (Path: \"HKCU\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\INPROCSERVER32\")","\"mshta.exe\" touched \"Microsoft HTA Document 6.0\" (Path: \"HKCU\\CLSID\\{3050F5C8-98B5-11CF-BB82-00AA00BDCE0B}\")","\"mshta.exe\" touched \"Microsoft HTML About Pluggable Protocol\" (Path: \"HKCU\\CLSID\\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\")","\"mshta.exe\" touched \"Multi Language Support\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{275C23E2-3747-11D0-9FEA-00AA003F8646}\")","\"mshta.exe\" touched \"CActiveIMMAppEx_Trident\" (Path: \"HKCU\\CLSID\\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\\TREATAS\")","\"mshta.exe\" touched \"PSOAInterface\" (Path: \"HKCU\\CLSID\\{00020424-0000-0000-C000-000000000046}\\TREATAS\")","\"mshta.exe\" touched \"JScript Language\" (Path: \"HKCU\\CLSID\\{16D51579-A30B-4C8B-A276-0FF4DC41E755}\\TREATAS\")","\"mshta.exe\" touched \"Microsoft Url History Service\" (Path: \"HKCU\\CLSID\\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\\TREATAS\")"],"description_v3":[{"type":"text","value":"\"mshta.exe\" touched \"HTML Document\" (Path: \"HKCU\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\INPROCSERVER32\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched \"Microsoft HTA Document 6.0\" (Path: \"HKCU\\CLSID\\{3050F5C8-98B5-11CF-BB82-00AA00BDCE0B}\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched \"Microsoft HTML About Pluggable Protocol\" (Path: \"HKCU\\CLSID\\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched \"Multi Language Support\" (Path: \"HKCR\\SOFTWARE\\CLASSES\\CLSID\\{275C23E2-3747-11D0-9FEA-00AA003F8646}\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched \"CActiveIMMAppEx_Trident\" (Path: \"HKCU\\CLSID\\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\\TREATAS\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched \"PSOAInterface\" (Path: \"HKCU\\CLSID\\{00020424-0000-0000-C000-000000000046}\\TREATAS\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched \"JScript Language\" (Path: \"HKCU\\CLSID\\{16D51579-A30B-4C8B-A276-0FF4DC41E755}\\TREATAS\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched \"Microsoft Url History Service\" (Path: \"HKCU\\CLSID\\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\\TREATAS\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-3","type":9,"relevance":5,"name":"Runs shell commands","description":"\"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" on 2019-12-15.13:02:36.862\n \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" on 2019-12-15.13:05:22.959","description_v2":["\"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" on 2019-12-15.13:02:36.862","\"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" on 2019-12-15.13:05:22.959"],"description_v3":[{"type":"text","value":"\"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" on 2019-12-15.13:02:36.862"},{"type":"linebreak"},{"type":"text","value":"\"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" on 2019-12-15.13:05:22.959"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024083-00001724)\n Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024086-00001932)\n Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028212-00001380)\n Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028214-00001752)","description_v2":["Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024083-00001724)","Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024086-00001932)","Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028212-00001380)","Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028214-00001752)"],"description_v3":[{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00024083-00001724","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00024086-00001932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00028212-00001380","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00028214-00001752","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-103","type":9,"relevance":3,"name":"Spawns new processes that are not known child processes","description":"Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024083-00001724)\n Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024086-00001932)\n Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028212-00001380)\n Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028214-00001752)","description_v2":["Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024083-00001724)","Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024086-00001932)","Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028212-00001380)","Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028214-00001752)"],"description_v3":[{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00024083-00001724","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00024086-00001932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00028212-00001380","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00028214-00001752","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-16","type":6,"relevance":1,"name":"Connects to LPC ports","description":"\"mshta.exe\" connecting to \"\\ThemeApiPort\"","description_v2":["\"mshta.exe\" connecting to \"\\ThemeApiPort\""],"description_v3":[{"type":"text","value":"\"mshta.exe\" connecting to \"\\ThemeApiPort\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"binary-0","type":8,"relevance":3,"name":"Dropped files","description":"\"!!! READ THIS !!!.hta\" has type \"HTML document ASCII text with very long lines with CRLF line terminators\"","description_v2":["\"!!! READ THIS !!!.hta\" has type \"HTML document ASCII text with very long lines with CRLF line terminators\""],"description_v3":[{"type":"text","value":"\"!!! READ THIS !!!.hta\" has type \"HTML document ASCII text with very long lines with CRLF line terminators\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"\"\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"cmd.exe\" touched file \"%WINDIR%\\AppPatch\\sysmain.sdb\"\n \"cmd.exe\" touched file \"%WINDIR%\\System32\\mshta.exe\"\n \"cmd.exe\" touched file \"%WINDIR%\\System32\\en-US\\mshta.exe.mui\"\n \"cmd.exe\" touched file \"%WINDIR%\\system32\\en\\mshta.exe.mui\"\n \"mshta.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat\"\n \"mshta.exe\" touched file \"%WINDIR%\\System32\\mshta.exe\"\n \"mshta.exe\" touched file \"%WINDIR%\\System32\\en-US\\mshta.exe.mui\"\n \"mshta.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"mshta.exe\" touched file \"%WINDIR%\\System32\\en-US\\msctf.dll.mui\"\n \"mshta.exe\" touched file \"%WINDIR%\\System32\\oleaccrc.dll\"\n \"mshta.exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"\n \"mshta.exe\" touched file \"%WINDIR%\\Fonts\\tahomabd.ttf\"\n \"mshta.exe\" touched file \"%WINDIR%\\Fonts\\tahoma.ttf\"","description_v2":["\"\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","\"cmd.exe\" touched file \"%WINDIR%\\AppPatch\\sysmain.sdb\"","\"cmd.exe\" touched file \"%WINDIR%\\System32\\mshta.exe\"","\"cmd.exe\" touched file \"%WINDIR%\\System32\\en-US\\mshta.exe.mui\"","\"cmd.exe\" touched file \"%WINDIR%\\system32\\en\\mshta.exe.mui\"","\"mshta.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat\"","\"mshta.exe\" touched file \"%WINDIR%\\System32\\mshta.exe\"","\"mshta.exe\" touched file \"%WINDIR%\\System32\\en-US\\mshta.exe.mui\"","\"mshta.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","\"mshta.exe\" touched file \"%WINDIR%\\System32\\en-US\\msctf.dll.mui\"","\"mshta.exe\" touched file \"%WINDIR%\\System32\\oleaccrc.dll\"","\"mshta.exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"","\"mshta.exe\" touched file \"%WINDIR%\\Fonts\\tahomabd.ttf\"","\"mshta.exe\" touched file \"%WINDIR%\\Fonts\\tahoma.ttf\""],"description_v3":[{"type":"text","value":"\"\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" touched file \"%WINDIR%\\AppPatch\\sysmain.sdb\""},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" touched file \"%WINDIR%\\System32\\mshta.exe\""},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" touched file \"%WINDIR%\\System32\\en-US\\mshta.exe.mui\""},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" touched file \"%WINDIR%\\system32\\en\\mshta.exe.mui\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%WINDIR%\\System32\\mshta.exe\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%WINDIR%\\System32\\en-US\\mshta.exe.mui\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%WINDIR%\\System32\\en-US\\msctf.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%WINDIR%\\System32\\oleaccrc.dll\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%WINDIR%\\Fonts\\tahomabd.ttf\""},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" touched file \"%WINDIR%\\Fonts\\tahoma.ttf\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":10,"name":"Found potential URL in binary/memory","description":"Pattern match: \"localbitcoins.com/buy_bitcoin\"\n Heuristic match: \"_Ag_nt.DmR_pr_onmai_.com\"","description_v2":["Pattern match: \"localbitcoins.com/buy_bitcoin\"","Heuristic match: \"_Ag_nt.DmR_pr_onmai_.com\""],"description_v3":[{"type":"text","value":"Pattern match: \"localbitcoins.com/buy_bitcoin\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"_Ag_nt.DmR_pr_onmai_.com\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"api-37","type":6,"relevance":10,"name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"mshta.exe\" opened \"\\Device\\KsecDD\"","description_v2":["\"mshta.exe\" opened \"\\Device\\KsecDD\""],"description_v3":[{"type":"text","value":"\"mshta.exe\" opened \"\\Device\\KsecDD\""}],"origin":"API Call","attck_id":"T1215","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-18","type":0,"relevance":10,"name":"Matched Compiler/Packer signature","description":"\"TheDMR.exe.bin\" was detected as \"UPX v1.25 (Delphi) Stub\"","description_v2":["\"TheDMR.exe.bin\" was detected as \"UPX v1.25 (Delphi) Stub\""],"description_v3":[{"type":"text","value":"\"TheDMR.exe.bin\" was detected as \"UPX v1.25 (Delphi) Stub\""}],"origin":"Static Parser","attck_id":"T1045","capec_id":"CAPEC-570","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1045","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"api-1","type":6,"relevance":10,"name":"Creates guarded memory regions (anti-debugging trick to avoid memory dumping)","description":"\"mshta.exe\" is protecting 8192 bytes with PAGE_GUARD access rights","description_v2":["\"mshta.exe\" is protecting 8192 bytes with PAGE_GUARD access rights"],"description_v3":[{"type":"text","value":"\"mshta.exe\" is protecting 8192 bytes with PAGE_GUARD access rights"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"static-6","type":0,"relevance":10,"name":"PE file has unusual entropy sections","description":"UPX1 with unusual entropies 7.92471124661","description_v2":["UPX1 with unusual entropies 7.92471124661"],"description_v3":[{"type":"text","value":"UPX1 with unusual entropies 7.92471124661"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"static-7","type":0,"relevance":10,"name":"PE file is packed with UPX","description":"\"TheDMR.exe.bin\" has a section named \"UPX0\"\n \"TheDMR.exe.bin\" has a section named \"UPX1\"","description_v2":["\"TheDMR.exe.bin\" has a section named \"UPX0\"","\"TheDMR.exe.bin\" has a section named \"UPX1\""],"description_v3":[{"type":"text","value":"\"TheDMR.exe.bin\" has a section named \"UPX0\""},{"type":"linebreak"},{"type":"text","value":"\"TheDMR.exe.bin\" has a section named \"UPX1\""}],"origin":"Static Parser","attck_id":"T1045","capec_id":"CAPEC-570","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1045","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-35","type":3,"relevance":5,"name":"Reads the active computer name","description":"\"mshta.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","description_v2":["\"mshta.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"],"description_v3":[{"type":"text","value":"\"mshta.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-1","type":3,"relevance":10,"name":"Reads the cryptographic machine GUID","description":"\"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","description_v2":["\"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"],"description_v3":[{"type":"text","value":"\"mshta.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"External Systems","identifier":"avtest-6","type":12,"relevance":10,"name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/72 reputation engines marked \"http://localbitcoins.com\" as malicious (1% detection rate)","description_v2":["1/72 reputation engines marked \"http://localbitcoins.com\" as malicious (1% detection rate)"],"description_v3":[{"type":"text","value":"1/72 reputation engines marked \"http://localbitcoins.com\" as malicious (1% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"api-0","type":6,"relevance":6,"name":"Writes data to a remote process","description":"\"cmd.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)\n \"cmd.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)\n \"cmd.exe\" wrote 4 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)","description_v2":["\"cmd.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)","\"cmd.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)","\"cmd.exe\" wrote 4 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)"],"description_v3":[{"type":"text","value":"\"cmd.exe\" wrote 32 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)"},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" wrote 52 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)"},{"type":"linebreak"},{"type":"text","value":"\"cmd.exe\" wrote 4 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 80)"}],"origin":"API Call","attck_id":"T1055","capec_id":"CAPEC-242","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Security","identifier":"registry-27","type":3,"relevance":10,"name":"Modifies proxy settings","description":"\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")\n \"mshta.exe\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYENABLE\"; Value: \"00000000\")\n \"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYSERVER\")\n \"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYOVERRIDE\")","description_v2":["\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")","\"mshta.exe\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYENABLE\"; Value: \"00000000\")","\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYSERVER\")","\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYOVERRIDE\")"],"description_v3":[{"type":"text","value":"\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\"; Key: \"PROXYBYPASS\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYENABLE\"; Value: \"00000000\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYSERVER\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"PROXYOVERRIDE\")"}],"origin":"Registry Access","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1112","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Security","identifier":"registry-36","type":3,"relevance":8,"name":"Queries sensitive IE security settings","description":"\"mshta.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")","description_v2":["\"mshta.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")"],"description_v3":[{"type":"text","value":"\"mshta.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-4","type":0,"relevance":10,"name":"Entrypoint in PE header is within an uncommon section","description":"\"TheDMR.exe.bin\" has an entrypoint in section \"UPX1\"","description_v2":["\"TheDMR.exe.bin\" has an entrypoint in section \"UPX1\""],"description_v3":[{"type":"text","value":"\"TheDMR.exe.bin\" has an entrypoint in section \"UPX1\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-1","type":0,"relevance":1,"name":"Imports suspicious APIs","description":"VirtualProtect\n GetProcAddress\n LoadLibraryA","description_v2":["VirtualProtect","GetProcAddress","LoadLibraryA"],"description_v3":[{"type":"text","value":"VirtualProtect"},{"type":"linebreak"},{"type":"text","value":"GetProcAddress"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryA"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"hooks-8","type":11,"relevance":10,"name":"Installs hooks/patches the running process","description":"\"mshta.exe\" wrote bytes \"c04e227720542377e0652377b53824770000000000d04f7500000000c5ea4f750000000088ea4f7500000000e9683a7582282477ee29247700000000d2693a75000000007dbb4f750000000009be3a7500000000ba184f7500000000\" to virtual address \"0x76A11000\" (part of module \"NSI.DLL\")\n \"mshta.exe\" wrote bytes \"75dc7975273e797551c17775ee9c7775949877750fb37d7510997775909777750000000042c64f75152e4f75c0d94f751bf74f75c1085175e0c24f7536da4f7530c64f75d5d94f7586c44f7500000000\" to virtual address \"0x6F96E000\" (part of module \"MSLS31.DLL\")\n \"mshta.exe\" wrote bytes \"e7392077e1a624772e712477ee29247785e21f776da02477906423773ad52a7726e41f77d16d2477003d2277804b227700000000ad3734778b2d3477b641347700000000\" to virtual address \"0x74BD1000\" (part of module \"WSHIP6.DLL\")","description_v2":["\"mshta.exe\" wrote bytes \"c04e227720542377e0652377b53824770000000000d04f7500000000c5ea4f750000000088ea4f7500000000e9683a7582282477ee29247700000000d2693a75000000007dbb4f750000000009be3a7500000000ba184f7500000000\" to virtual address \"0x76A11000\" (part of module \"NSI.DLL\")","\"mshta.exe\" wrote bytes \"75dc7975273e797551c17775ee9c7775949877750fb37d7510997775909777750000000042c64f75152e4f75c0d94f751bf74f75c1085175e0c24f7536da4f7530c64f75d5d94f7586c44f7500000000\" to virtual address \"0x6F96E000\" (part of module \"MSLS31.DLL\")","\"mshta.exe\" wrote bytes \"e7392077e1a624772e712477ee29247785e21f776da02477906423773ad52a7726e41f77d16d2477003d2277804b227700000000ad3734778b2d3477b641347700000000\" to virtual address \"0x74BD1000\" (part of module \"WSHIP6.DLL\")"],"description_v3":[{"type":"text","value":"\"mshta.exe\" wrote bytes \"c04e227720542377e0652377b53824770000000000d04f7500000000c5ea4f750000000088ea4f7500000000e9683a7582282477ee29247700000000d2693a75000000007dbb4f750000000009be3a7500000000ba184f7500000000\" to virtual address \"0x76A11000\" (part of module \"NSI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" wrote bytes \"75dc7975273e797551c17775ee9c7775949877750fb37d7510997775909777750000000042c64f75152e4f75c0d94f751bf74f75c1085175e0c24f7536da4f7530c64f75d5d94f7586c44f7500000000\" to virtual address \"0x6F96E000\" (part of module \"MSLS31.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" wrote bytes \"e7392077e1a624772e712477ee29247785e21f776da02477906423773ad52a7726e41f77d16d2477003d2277804b227700000000ad3734778b2d3477b641347700000000\" to virtual address \"0x74BD1000\" (part of module \"WSHIP6.DLL\")"}],"origin":"Hook Detection","attck_id":"T1179","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"registry-25","type":3,"relevance":3,"name":"Reads information about supported languages","description":"\"mshta.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","description_v2":["\"mshta.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"],"description_v3":[{"type":"text","value":"\"mshta.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Environment Awareness","identifier":"binary-8","type":8,"relevance":5,"name":"The input sample contains a known anti-VM trick","description":"Found VM detection artifact \"CPUID trick\" in \"TheDMR.exe.bin\" (Offset: 51982)","description_v2":["Found VM detection artifact \"CPUID trick\" in \"TheDMR.exe.bin\" (Offset: 51982)"],"description_v3":[{"type":"text","value":"Found VM detection artifact \"CPUID trick\" in \"TheDMR.exe.bin\" (Offset: 51982)"}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-3","type":12,"relevance":10,"name":"Sample was identified as malicious by a large number of Antivirus engines","description":"28/69 Antivirus vendors marked sample as malicious (40% detection rate)","description_v2":["28/69 Antivirus vendors marked sample as malicious (40% detection rate)"],"description_v3":[{"type":"text","value":"28/69 Antivirus vendors marked sample as malicious (40% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-0","type":12,"relevance":8,"name":"Sample was identified as malicious by at least one Antivirus engine","description":"28/69 Antivirus vendors marked sample as malicious (40% detection rate)","description_v2":["28/69 Antivirus vendors marked sample as malicious (40% detection rate)"],"description_v3":[{"type":"text","value":"28/69 Antivirus vendors marked sample as malicious (40% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistance","identifier":"api-20","type":6,"relevance":7,"name":"Allocates virtual memory in a remote process","description":"\"\" allocated memory in \"C:\\!!! READ THIS !!!.hta\"\n \"\" allocated memory in \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","description_v2":["\"\" allocated memory in \"C:\\!!! READ THIS !!!.hta\"","\"\" allocated memory in \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""],"description_v3":[{"type":"text","value":"\"\" allocated memory in \"C:\\!!! READ THIS !!!.hta\""},{"type":"linebreak"},{"type":"text","value":"\"\" allocated memory in \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""}],"origin":"API Call","attck_id":"T1055","capec_id":"CAPEC-242","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"api-35","type":6,"relevance":5,"name":"Checks for a resource fork (ADS) file","description":"\"mshta.exe\" checked file \"C:\"","description_v2":["\"mshta.exe\" checked file \"C:\""],"description_v3":[{"type":"text","value":"\"mshta.exe\" checked file \"C:\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"target-14","type":9,"relevance":8,"name":"Spawns a lot of processes","description":"Spawned process \"\" (UID: 00019682-00003236)\n Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024083-00001724)\n Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024086-00001932)\n Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028212-00001380)\n Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028214-00001752)","description_v2":["Spawned process \"\" (UID: 00019682-00003236)","Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024083-00001724)","Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00024086-00001932)","Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028212-00001380)","Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\" (UID: 00028214-00001752)"],"description_v3":[{"type":"text","value":"Spawned process \"\""},{"type":"process","process_uid":"00019682-00003236","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00024083-00001724","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00024086-00001932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c start %WINDIR%\\system32\\mshta.exe \"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00028212-00001380","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"C:\\\\!!! READ THIS !!!.hta\"\""},{"type":"process","process_uid":"00028214-00001752","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null}],"detonation_parameters":{"action_script":"default","experimental_anti_evasion":true,"script_logging":false,"allow_sample_tampering":false,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":180,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default.au3","monitor_script_description":"Default analysis","windows_version_name":"Windows 7","windows_version_edition":"Professional","windows_version_service_pack":"Service Pack 1","windows_version_version":"6.1 (build 7601)","windows_version_bitness":"32","custom_date_time":null,"sandbox_version":"8.30","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Persistence","details":["Spawns a lot of processes"]},{"name":"Fingerprint","details":["Queries kernel debugger information","Queries process information","Reads the cryptographic machine GUID","Queries the internet cache settings (often used to hide footprints in index.dat or internet cache)","Reads the active computer name","Queries sensitive IE security settings"]},{"name":"Evasive","details":["The input sample contains a known anti-VM trick"]}],"icon":"$27","visualization":"$28","classification":["71.9% (.EXE) UPX compressed Win32 Executable","11.9% (.EXE) Win32 Executable (generic)","5.3% (.EXE) OS/2 Executable (generic)","5.3% (.EXE) Generic Win/DOS Executable","5.3% (.EXE) DOS Executable Generic"],"dns_requests":[],"contacted_hosts":[],"contacted_countries":{"countries":[],"coordinates":[]},"port_infos":[],"extracted_strings":{"all":[{"value":"ISEhIFJFQUQgVEhJUyAhISEuaHRh","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ISIjJCUmJygpKissLS4v","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ImJiSE1sR1d3aXhf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XFwhISEgUkVBRCBUSElTICEhIS5odGEi","type":"Ansi","source":"Process Commandline","process":null,"filename":"mshta.exe","compromised":null,"detection_total":null,"total":null},{"value":"ImVzLTYteipvcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Iko8X3Q8PCR0OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ImplPFQ+IFpvSm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IzNFNjA1NXZYe2JX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"I1tLTmBvVWFQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JCAkSi5TICAk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JDRAMEQsMDQ0bA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JGV2PDJzNkxw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JHAtT01pZVNRakc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmVTTEpVNHJGQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmhDSDVTeVJIZGNKZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmxHazQvcCoiUm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JydfX18sLF8saWlp","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"KTgqWitPfCxv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"K2luLSpUK1VN","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"K1A1clppb0tFQTAw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LCxfLCwsdj9fLF8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"LCxfX19fLF9f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"LC4sXywsLC4sLiwsJyxf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"LDRONSdFIiQ2S0s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LEV5TTBVNk8zTUxVNUdoY0N2TW4rK2E0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk5Ia2JkNTZFSDFUWTNxeGhGcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ly93azlaWVJhZjhRdXFqV25xMUFLLzRQbWxDaXBmQzNiaEs2WVBST0NQNzdudkVXUXo2V3l6QU0vQzYzanZkb1lzUjZDVExPWkl5c1dwcmo3MGJRazVUT253MTk5V1hxaGlIdS9aL2lPZnByakRiVC9BNXBUSWlzV0J5SEsxdXEweVdZVTFSNnlZcGtYYU4rRXBvMUZZWlh3ejlHVVJFbk93dG1QUjB0Q0o5bnBZeUl5Mzg1NjJNZjdOWnFTS0JJTCsyVjhmeUhMRXBjWk9pa25waXhIOUFWQ2lnYnFLQktMUHhCYWk2WWw4VlpMN3hkVVVwYmFSbGpaQkFINlBKcXlLSzI=","type":"Ansi","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"L2Mgc3RhcnQgJVdJTkRJUiVcc3lzdGVtMzJcbXNodGEuZXhlICJDOlxcISEhIFJFQUQgVEhJUyAhISEuaHRhIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"cmd.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3BnKShbfFg+SDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1JGbExMSnp1WQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1QvW3wpUCE/VWEw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OUFCMkVGJg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MDRUNjBsenNWRFpK","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MFV5WnRzWGhY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MHlYSjJjQUpx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MS94VkJTb3EzQ00=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTYzMmFwJ2cvNjQyQi43","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTZMRVVOSUNPREU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MUJjSXBUMG9QdQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MWc2NktZJFF4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MkozLHR1KjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Mk4zeU8vYVYzcmBY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"M3BuenA1WDJuSg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NDNtYTdMXGwySg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NGJVUFpTZGFMWlJwVGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NEg2TFJrTnJAak50TXZb","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NG1LenRad30n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NTFkSFZEazM0V09lamF0VUxYN002bjJG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NTY5NSs2SWtY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NX15bC1tLU91","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ni0mXCJmeDZR","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NjQsaVZCT1J3MEtHZ29B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NkRQUGZFaFB4TThqcQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NmkzZDNhWGFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Nm1NRXhzWmgkcmxNQ2Zk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"N0RBY2R2cUdg","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTgyLy9DV0ovQWtraEpsSkZNVg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OURNelc2eVZpeTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OUwyWDRkNXA2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OXIsIDhqRGdYaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OXJIJVAmWCdgKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OixPPk5JVnJAR0phNS95VQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyUoIDAgZSNCJkpJWEJ2NyhRNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O0BXbjh6OWtaekFiIGF5a0VkWkx2Tg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O2IvbC9ZNGQr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCFET0NUWVBFIEhUTUwgUFVCTElDICctVzNDRFREIEhUTUwgNC4wMUVOJyAnaHR0cDp3d3cudzMub3JnL1RSL2h0bWw0L3N0cmljdC5kdGQnPjxodG1sPjxoZWFkPjxtZXRhIGNoYXJzZXQ9J3dpbmRvd3MtMTI1MSc+PHRpdGxlPkFnZW50LkRNUkBwcm90b25tYWlsLmNvbTwvdGl0bGU+PHNjcmlwdCBsYW5ndWFnZT0nSlNjcmlwdCc+d2luZG93Lm1vdmVUbyg1MCwgNTApO3dpbmRvdy5yZXNpemVUbyhzY3JlZW4ud2lkdGggLSAxMDAsIHNjcmVlbi5oZWlnaHQ=","type":"Ansi","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"$29","type":"Ansi","source":"Dropped File","process":null,"filename":"!!! READ THIS !!!.hta","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnIHN0YW5kYWxvbmU9J3llcyc/Pjxhc3NlbWJseSB4bWxucz0ndXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEnIG1hbmlmZXN0VmVyc2lvbj0nMS4wJz4gIDx0cnVzdEluZm8geG1sbnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206YXNtLnYzIj4gICAgPHNlY3VyaXR5PiAgICAgIDxyZXF1ZXN0ZWRQcml2aWxlZ2VzPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSdhc0ludm9rZXInIHVpQWNjZXNzPSdmYWxzZScgLz4gICAgICA8L3JlcXVlc3RlZFByaXZpbGVnZXM+ICAgIDwvc2VjdXJpdHk+ICA8L3RydXN0SW5mbz48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PS5SPTF0Sz0zRGs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PTkwNjggOVI3OHJrSEgwSEA4OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PVF3SVFRV1NQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"P19fOz8sX19fZ3FfLDks","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fX19fMDBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"P2woaHwuP0FWTg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"P8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvT/Dr8K/wr3Dr8K/wr3Dr8K/wr3Dr8K/wr3Dr8K/wr0=","type":"Ansi","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QCQ8IChsNDQh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QDZRIVJuUVUxQlZ4and2OFk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QDogdGhpcyBvYmplY34=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"W1NyeVgxaTUyKw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDhBNC0tNjU4Mzk4MjUyLTgxNDc0NzYzMi0xODQ5NTg1MzAwOTY0MTQ3ODkwLTE0NTI4MDk3MDgxMzQwNTcyNjYwNjI3MTA3NTUxNzYwNTY5MjYx","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XTcsKjVNTHZsTWZPQjlfVQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XXFIOXdMbndu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XndGdz52YH51","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XycwP19fX19fXzA=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"Xy1fXy0tXy0xX21f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"XzBALF9fX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"XzhaZ3VVMTBWRg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Xz9fXz9fP3Y/X19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X18wQGZpb19maW9fQA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X18wQGlpb19paW9fQA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fLF9fX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fMDBvX19fX19fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fMF9fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fXzBfX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fXzBfX19fX19fX19fX18wX19fX18w","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX0AsX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18wXzBfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18wX18wMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18wX19fX19fX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18/X2lpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fMF9f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fMF9fX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBfXzBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBfXzBfX19fX19fX19fXzA=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX19xMF8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX2Zpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX2Zpb19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX2lpb19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fZmlvX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19faWlvX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19maW9fX19fQCdfZmlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19maW9fX2Zpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19pLl9fXzBfJydpaV9fLA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19paW9fX19fQF9paW8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19paW9fX2lpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2EuMlRvKDUw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X0FnX250LkRtUl9wcl9vbm1haV8uY29t","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X0FnZW50LkRtUl9wcjB0MG5tYV9fLmMwbQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19AX19fX0BfX18w","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19fX18wXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19fX18wX2Zpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19fX19AX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19fX19fX2Zpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19maV9fZmlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpaWlfaWlfX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19AX19fX0BfX18w","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19fX18wXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19fX18wX2lpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19fX19AX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19fX19fX2lpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19paW9faWlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X25OTk5OW0g1Iw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YE5GUENvWCB3Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YFl0Nzl5VnNRb1NF","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWBUQ2J5K3RZMWFL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNjZXB0TGFuZ3VhZ2U=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRtaW5UYWJQcm9jcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YWU4Szl2VFd2TTlMYmxONGJlWm4v","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUVTTklvU0Uy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YUgraDRHR09Xd1JKaWlUeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3cgUHJvZ3JhbW1hdGljIEN1dF9Db3B5X1Bhc3Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dPbmx5RE5TUXVlcnlGb3JXUEFE","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzIFVzZSBNeSBDb2xvcnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzIFVzZSBNeSBGb250IEZhY2U=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzIFVzZSBNeSBGb250IFNpemU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzRHJhaW5PblJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QW5jaG9yIENvbG9y","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QW5jaG9yIENvbG9yIEhvdmVy","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QW5jaG9yIENvbG9yIFZpc2l0ZWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QW5jaG9yIFVuZGVybGluZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YW5kIGZpbGVzIHNob3VsZCBub3QgY29udGFpbiB2YWx1YWJsZSBpbmZvcm1hdGlvbi4gKGRhdGFiYXNlcyxiYWNrdXBzLCBsYXJnZSBleGNlbCBzaGVldHMsIGV0Yy4pPC91bD48L2Rpdj48ZGl2IGNsYXNzPSdub3RlIGluZm8nPjxkaXYgY2xhc3M9J3RpdGxlJz5Ib3cgdG8gb2J0YWluIEJpdGNvaW5zPC9kaXY+PHVsPllvdSBjYW4gYnV5IGJpdGNvaW4gZnJvbSBoZXJlOjxicj48YSBocmVmPSdodHRwczpsb2NhbGJpdGNvaW5zLmNvbS9idXlfYml0Y29pbg==","type":"Ansi","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":1,"total":72},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0NvbmZpZ1VSTA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0RldGVjdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b1Byb3h5RGV0ZWN0VHlwZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXl4NjN4KzY2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXotQ3lybC1BWg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXotTGF0bi1BWg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QmFkUHJveHlFeHBpcmVzVGltZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YkQyR1EvRld0Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qk9CVy82K1E7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnJlYWtPbkluaXRpYWxpemVQcm9jZXNzRmFpbHVyZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnJlYWtPblJlY3Vyc2l2ZURsbExvYWRz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YnMtQ3lybC1CQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YnMtTGF0bi1CQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QlMxJkJSMUkvWzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnN4Ylp8OENw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QlRQXmh3dWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzSFRUUE5vQ2FjaGVDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzU1NMTm9DYWNoZUNoZWNr","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Yy8wWy40O0g4JiAoOkk3Ljk6LCEgLzMwLT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzEnMC4sX19fX19x","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"YzNNJlBSc3hZako=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVMaW1pdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVNb2Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVQcmVmaXg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2VydENhY2hlTm9WYWxpZGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGVSZXZvY2F0aW9u","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2dZTG1YYkhwMCZ4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2g3OHZsZ2RaaG1z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y0xCeGxNY2gzcFJEMTBeeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xlYW51cCBIVENz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0xmVzNzUDlpYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50QXV0aEJ1aWx0SW5VSQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50Q2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2x0T2tJSlZBZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29JbnRlcm5ldENvbWJpbmVJVXJpQ2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tYmluZUZhbHNlU3RhcnREYXRh","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdFJldHJpZXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdFRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29uc29sZUJ1ZmZlckFsd2F5cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudCBUeXBl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVXJpQ2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y3JpQHInbThhZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvZ3JhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1NTX0NvbXBhdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y3VDejhhajhjcUxWajl4QmtPR1k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1ZMaXN0WE1MVmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1ZMaXN0WE1MVmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3p3QjlvT29i","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF5c1RvS2VlcA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdIZWFwRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdQcm9jZXNzSGVhcE9ubHk=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdF9Db2RlUGFnZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdF9JRUZvbnRTaXplUHJpdmF0ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdEFjY2Vzc1Blcm1pc3Npb24=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdENvbm5lY3Rpb25TZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGd1Wm1aYmM1dnZibnJNR3dqVnNBdXZ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbHVwVXNlTGFuU2V0dGluZ3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBEaWFnbm9zdGljcyBNb2Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBTY3JpcHQgRGVidWdnZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBWaXNpdGVkIEh5cGVybGlua3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUJhc2ljT3ZlckNsZWFyQ2hhbm5lbA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUJyYW5jaENhY2hl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNhY2hpbmdPZlNTTFBhZ2Vz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVuZ2luZQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUV4Y2VwdGlvbkNoYWluVmFsaWRhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUZhbHNlU3RhcnRCbG9ja2xpc3Q=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUhlYXBMb29rYXNpZGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUtlZXBBbGl2ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU5UTE1QcmVBdXRo","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVJlYWRSYW5nZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNjcmlwdERlYnVnZ2VySUU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNlY3VyaXR5U2V0dGluZ3NDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheSBJbmxpbmUgSW1hZ2Vz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheSBJbmxpbmUgVmlkZW9z","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVNjcmlwdERvd25sb2FkRmFpbHVyZVVJ","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVN0cmluZw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVFbnRyaWVz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9tYWluTGltaXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RE9NU3RvcmFnZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFVzZUROU0xvYWRCYWxhbmNpbmc=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ0RlbGF5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbERlbGF5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbEluc2V0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbEludGVydmFs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHVvUHJvdG9jb2xz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RFhGZWF0dXJlTGV2ZWw=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZFlSXFw5ZnJZ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RStYVFk4ZDNvOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RTFVUG9EOUEx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RV0wOUhoc0Ja","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZUMvMWVmQk9Kbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZUhDbDFkcWpwVjJscU8yaWJ2RVBSU3E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWxfc2ltZC5jQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlIEF1dG9JbWFnZVJlc2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQW5jaG9yQ29udGV4dA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQXV0b1Byb3h5UmVzdWx0Q2FjaGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cDFfMQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cFRyYWNl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTGVnYWN5QXV0b1Byb3h5RmVhdHVyZXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTmVnb3RpYXRl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUHVueWNvZGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU3BkeURlYnVnQXNzZXJ0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5mb3JjZVAzUFZhbGlkaXR5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZXMtRVNfdHJhZG5s","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZVZgeHp5ZzJqY1FM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0ZU9wdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwYW5kIEFsdCBUZXh0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Ri9xK2YyNUd5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmNTdUY4NytkMS8wcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmRCM3E5QyYlNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RkVBVFVSRV9DTElFTlRBVVRIQ0VSVEZJTFRFUg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZmVNdXRMU0hDdF5VT1RF","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmlvXzBfX19fZmlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlyc3RSdW5Db21wbGV0ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9nRTBGanNhM25TYkQxYjBieA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZlBlOTkzN3UvZmRQbmpZMk4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJvbUNhY2hlVGltZW91dA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnRwRGVmYXVsdEV4cGlyeVRpbWVTZWNz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RlZWMDdlZkY3dGVHcjBHUCo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Zz9nZmVycjs5ZGRvY2I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0hJSktMTU5P","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2hpamtsbW5vcHE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsRmxhZw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2Vzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R09iZ2NWNXFOcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3E2dGpicnd4cGJLbkRDRXdqXg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aDZZaDhNRkxMeDFUMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SD5gMSRIY2ggJyY8ZWd5ZVt2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEBNVEYqI2BO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aGEtTGF0bi1ORw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SENWdjZNZXp2aGBS","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyRXhjbHVzaW9uTGlzdEZvckNhY2hl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGVscGVyRGxsTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SEkkSkRaVEYqI1xT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aE1XNCtMOmF1MlY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aFRxZStGTjdpTWIkZkFROERn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cERlZmF1bHRFeHBpcnlUaW1lU2Vjcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SFgkPyIoPEBQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"STBSL0puQk5I","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWRuRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVDb21wYXRWZXJzaW9uSGlnaA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVDb21wYXRWZXJzaW9uTG93","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVGaXhlZEZvbnROYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVGb250U2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVGb250U2l6ZVByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVoYXJkZW4=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVQcm9wRm9udE5hbWU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVTYW5zU2VyaWZGb250TmFtZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVTZXJpZkZvbnROYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVVSUZvbnROYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aWlvXzBfX19faWlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50cmFuZXROYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SXNUZXh0UGxhaW5Ib25vcmVk","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SXRDPEx0MzxUdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aXUtQ2Fucy1DQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aXUtTGF0bi1DQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SiYqUiBHISsw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SjJVWnMwb0VDdmNmYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SjZMemZwWnZmSQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SlNjcmlwdFByb2ZpbGVDYWNoZUV2ZW50RGVsYXk=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"azJPSUFLVjNPTnA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2MvJlU2RSZJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2U2RUFBb3Bd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFjdGl2YXRpb25Db250ZXh0c0FsaXZl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFsaXZlVGltZW91dA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2Y1ZFFoMG1WSHNnVkwk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3AqJUk9dVAzZSQ4Qg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3ZVeCR1eVNQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S3dPdFE6T09TQGx0NVFYVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TENJRFRvRUcrRg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVhc2hMZWdhY3lDb29raWVz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGlicmFyeVBhdGg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWwgQXBwRGF0YQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TS9IbUZiZ2RMRGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bTNQL1VwQnM0T1FtakB6MitUMFpQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bTV2MmJOKzl6VG5pLzN5ODho","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVRocm90dGxpbmc=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXIxXzBTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJQcm94eQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4RGVhZEFjdGl2YXRpb25Db250ZXh0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4SHR0cFJlZGlyZWN0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3ViRG9tYWlucw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU0FQSWZvckNyYWNr","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU1NlcnZlcm5hbWU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRpbHUkelRkcFM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVpe09MZ0dM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWlncmF0ZVByb3h5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWltZUV4Y2x1c2lvbkxpc3RGb3JDYWNoZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluaW11bVN0YWNrQ29tbWl0SW5CeXRlcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluaW11bVN5c3RlbVRpbWVyUmVzb2x1dGlvbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWlzY0ZsYWdz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bW4tTW9uZy1DTg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TW92ZSBTeXN0ZW0gQ2FyZXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNodGEuZXhl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXcyN1F6cDIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVNwYWNlX0NhbGxvdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bmJCaGdQS245SlM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmNsS3NVd15yLw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bkNyR0JqK0Rv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bkRlUE1xQUQzdlg2VlVMaDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV4dF9DYXRhbG9nX0VudHJ5X0lE","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bmczbjVaOEUwL1o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bm1BbWpMQXFadXVo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tk5OTk5OTk5OTk5O","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm9DaGVja0F1dG9kaWFsT3ZlclJpZGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9GaWxlTWVudQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TnVtX0NhdGFsb2dfRW50cmllcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bzFhRUtlejBudjc0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2JGJDVYREdWdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2kodE5SQVI1Kw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2lDUTdkVjNYfERu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2lrSGl4SDlBJmlnYnE+aCo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xVVnFyWVJBcQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b211bHRpcGxlIGNoYW5uZWxzdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T05FX0FORF9aRVJP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3BlcmF0aW9uYWxEYXRh","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3ZlcnJpZGVNZW1vcnlQcm90ZWN0aW9uU2V0dGluZw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T1gzOFFZeGxi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3ltditvTmhMKHJt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3ppU1VjfmlXdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3slMHg5R1RzMF4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cC1DUllQVE9QUF84XzJfMEppam5kYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2VkQ2F0YWxvZ0l0ZW0=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UEtDU19QQURE","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGxheV9BbmltYXRpb25z","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGxheV9CYWNrZ3JvdW5kX1NvdW5kcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cG5vSmEgdmFsaWQga2V5IFZu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9FanpWZDdDaFJx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UE9OP007OTk5TUxLSm9tcnJySklI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ29ubmVjdExpbWl0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlUmVzb2x2ZUxpbWl0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRfQmFja2dyb3VuZA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGly","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJZA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlCeXBhc3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlFbmFibGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlIdHRwMS4x","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlPdmVycmlkZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlTZXR0aW5nc1BlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cFprL2NaUDB0RklETA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cXBvb29uTk5uJ20/bGxr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cXBzLXBsb2Nh","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cXBzLXBsb2Nt","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cjBNLzY4ZzZzdmFHNVkq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VEZWZhdWx0QXV0aG5MZXZlbA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UkJWSEg3WjBQZEZUVm42Lw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ckRUNEQySDJmVA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVjZWl2ZVRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVuZGVyaW5nTG9vcE1heFRpbWU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Um9vdERvbWFpbkxpbWl0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UlBoU1hHTDVyPlE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRmQ29udmVydGVyRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UldmMUlGQ09tbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UllLdEF0TlM3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZWRMZWdhY3lTZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUZpbGVMaWZlVGltZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUZpbGVMaW1pdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUxvd2VyQm91bmQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VhcmNoUGF0aE1vZGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJlUHJvdG9jb2xz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHlfSEtMTV9vbmx5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEV4dHJhQ1JMRg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZFRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsX0FjY2Vzc19OdW0=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVySW5mb1RpbWVvdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbk1lcmdpbmc=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvblN0YXJ0VGltZURlZmF1bHREZWx0YVNlY3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hhcmVDcmVkc1dpdGhXaW5IdHRw","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U0hFTEwzMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvdyBpbWFnZSBwbGFjZWhvbGRlcnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1JlY3Vyc2l2ZURsbExvYWRz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1dpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2h1dGRvd25GbGFncw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c2trdkxrVWlO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c21fTWNteFo8Z0c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U21vb3RoU2Nyb2xs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0UmVjZWl2ZUJ1ZmZlckxlbmd0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0U2VuZEJ1ZmZlckxlbmd0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2lhbEZvbGRlcnNDYWNoZVNpemU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3FtSHR0cFN0cmVhbVJhbmRvbVVwbG9hZFBvb2xTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItQ3lybC1CQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItQ3lybC1DUw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItQ3lybC1NRQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItQ3lybC1SUw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItTGF0bi1CQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItTGF0bi1DUw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItTGF0bi1NRQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItTGF0bi1SUw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3VQY0N3b1N4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3luY01vZGU1","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VCpySDRyeW5MbFU4MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VC8+cFRJaVZCeDE2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dDQ8Png8LXQsPGF8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGFiUHJvY0dyb3d0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGJHMnQoM3VSM1doU1NDbTB4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dEJOXGMoOEU3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQXV0b3R1bmluZw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGctQ3lybC1USg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VExgTmxPeFAjRw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG90YWxMaW1pdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VE9WMVB3QU1QdHE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2luZ0ZsYWdz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2tBY3RpdmF0aW9uQ29udGV4dFJlbGVhc2Vz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dHRhbVRobnNNYXRp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHlOZnpYLnZsPiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHptLUxhdG4tRFo=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VUpiYVJsalpCQUg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VU5DQXNJbnRyYW5ldA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VW5sb2FkRXZlbnRUcmFjZURlcHRo","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXBFYURrTVpIUXFDQ0tuYjZ6NTdHdUdXeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXNlIEFuY2hvciBIb3ZlciBDb2xvcg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlX0RsZ0JveF9Db2xvcnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRGVsYXllZEFjY2VwdGFuY2U=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlsdGVy","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlyc3RBdmFpbGFibGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSW1wZXJzb25hdGVkRGV2aWNlTWFw","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXNlcnNccnBpcGNcRGVza15wXA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVRGOFNlcnZlck5hbWVSZXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dXotQ3lybC1VWg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dXotTGF0bi1VWg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"djVNTXZQdTNqdnpTNDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dkRURCk0LjAxRU4n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFByb3RlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VklzbFlaWTlmaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VnZnZERWdVMxWVZHNHhIS3RnajZwc1MwWXY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VyMsR3g0RXw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzBOYCIlbE4t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzRsMGw6Y2hg","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzhKZjd8NldSalM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d15zOFFNKysmNGtM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FybkFsd2F5c09uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uQmFkQ2VydFJlY3Zpbmc=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uSFRUUFNUb0hUVFBSZWRpcmVjdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uSW50cmFuZXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdFJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uWm9uZUNyb3NzaW5n","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93c0VkaXRpb24=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d2p2WnpLVGpZOEZo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0xnOUQqalVIbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2xrQVR1WVZ1TXc4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V205amorbTFHTW8yUlBiMVo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d21CVzFoSVNINSx3YllCWDFRQkhy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d21QbGZ2emkyb0JIemZHVQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtRGV2aWNlSWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtRFhGZWF0dXJlTGV2ZWw=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtUmV2aXNpb24=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtU3ViU3lzSWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtVmVuZG9ySWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtVmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtVmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZE92ZXJyaWRl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZFNlYXJjaEFsbERvbWFpbnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyTnVtSGFuZGxlQnVja2V0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyU3BpbkNvdW50","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d3Q8enUxeSo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d1lQZzhDTkFvQmVHMEc5eTc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WERvbWFpblJlcXVlc3Q=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"WEVFZzd6UW1RSg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eFJVbEVsclY4VU9EYjBC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WHZ1ZWAyUUxZY3E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eFdOaHYzWXg1YWp4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WHprclJnRDg5Yi9rRG9T","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eTZhazg4dmlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WVBFIEhUTUwgUFVCTElDICct","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WVhXV29WbicnJ1VVVD9T","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eks5Q1UzRDR4bA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wm9vbURpc2FibGVk","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"WndWZC5YYCFo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WnpEbk16S3dNN1BrTnhqKA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"elpUPDBCVEJW","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fkRNVXN1eDgwZ29g","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fn59b3ZycnJ8fHt6Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"ISEhIFJFQUQgVEhJUyAhISEuaHRh","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ISIjJCUmJygpKissLS4v","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XFwhISEgUkVBRCBUSElTICEhIS5odGEi","type":"Ansi","source":"Process Commandline","process":null,"filename":"mshta.exe","compromised":null,"detection_total":null,"total":null},{"value":"L2Mgc3RhcnQgJVdJTkRJUiVcc3lzdGVtMzJcbXNodGEuZXhlICJDOlxcISEhIFJFQUQgVEhJUyAhISEuaHRhIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"cmd.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3BnKShbfFg+SDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1QvW3wpUCE/VWEw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MS94VkJTb3EzQ00=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCFET0NUWVBFIEhUTUwgUFVCTElDICctVzNDRFREIEhUTUwgNC4wMUVOJyAnaHR0cDp3d3cudzMub3JnL1RSL2h0bWw0L3N0cmljdC5kdGQnPjxodG1sPjxoZWFkPjxtZXRhIGNoYXJzZXQ9J3dpbmRvd3MtMTI1MSc+PHRpdGxlPkFnZW50LkRNUkBwcm90b25tYWlsLmNvbTwvdGl0bGU+PHNjcmlwdCBsYW5ndWFnZT0nSlNjcmlwdCc+d2luZG93Lm1vdmVUbyg1MCwgNTApO3dpbmRvdy5yZXNpemVUbyhzY3JlZW4ud2lkdGggLSAxMDAsIHNjcmVlbi5oZWlnaHQ=","type":"Ansi","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnIHN0YW5kYWxvbmU9J3llcyc/Pjxhc3NlbWJseSB4bWxucz0ndXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEnIG1hbmlmZXN0VmVyc2lvbj0nMS4wJz4gIDx0cnVzdEluZm8geG1sbnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206YXNtLnYzIj4gICAgPHNlY3VyaXR5PiAgICAgIDxyZXF1ZXN0ZWRQcml2aWxlZ2VzPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSdhc0ludm9rZXInIHVpQWNjZXNzPSdmYWxzZScgLz4gICAgICA8L3JlcXVlc3RlZFByaXZpbGVnZXM+ICAgIDwvc2VjdXJpdHk+ICA8L3RydXN0SW5mbz48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDhBNC0tNjU4Mzk4MjUyLTgxNDc0NzYzMi0xODQ5NTg1MzAwOTY0MTQ3ODkwLTE0NTI4MDk3MDgxMzQwNTcyNjYwNjI3MTA3NTUxNzYwNTY5MjYx","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Xy1fXy0tXy0xX21f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X0FnX250LkRtUl9wcl9vbm1haV8uY29t","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YW5kIGZpbGVzIHNob3VsZCBub3QgY29udGFpbiB2YWx1YWJsZSBpbmZvcm1hdGlvbi4gKGRhdGFiYXNlcyxiYWNrdXBzLCBsYXJnZSBleGNlbCBzaGVldHMsIGV0Yy4pPC91bD48L2Rpdj48ZGl2IGNsYXNzPSdub3RlIGluZm8nPjxkaXYgY2xhc3M9J3RpdGxlJz5Ib3cgdG8gb2J0YWluIEJpdGNvaW5zPC9kaXY+PHVsPllvdSBjYW4gYnV5IGJpdGNvaW4gZnJvbSBoZXJlOjxicj48YSBocmVmPSdodHRwczpsb2NhbGJpdGNvaW5zLmNvbS9idXlfYml0Y29pbg==","type":"Ansi","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":1,"total":72},{"value":"QnJlYWtPbkluaXRpYWxpemVQcm9jZXNzRmFpbHVyZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzSFRUUE5vQ2FjaGVDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Yy8wWy40O0g4JiAoOkk3Ljk6LCEgLzMwLT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29JbnRlcm5ldENvbWJpbmVJVXJpQ2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tYmluZUZhbHNlU3RhcnREYXRh","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1NTX0NvbXBhdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1ZMaXN0WE1MVmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1ZMaXN0WE1MVmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdQcm9jZXNzSGVhcE9ubHk=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdENvbm5lY3Rpb25TZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBTY3JpcHQgRGVidWdnZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNjcmlwdERlYnVnZ2VySUU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVNjcmlwdERvd25sb2FkRmFpbHVyZVVJ","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RE9NU3RvcmFnZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbERlbGF5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbEluc2V0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbEludGVydmFs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cDFfMQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cFRyYWNl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0ZU9wdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rmlyc3RSdW5Db21wbGV0ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnRwRGVmYXVsdEV4cGlyeVRpbWVTZWNz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cERlZmF1bHRFeHBpcnlUaW1lU2Vjcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVDb21wYXRWZXJzaW9uSGlnaA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVDb21wYXRWZXJzaW9uTG93","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SlNjcmlwdFByb2ZpbGVDYWNoZUV2ZW50RGVsYXk=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWwgQXBwRGF0YQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXIxXzBTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJQcm94eQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4SHR0cFJlZGlyZWN0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3ViRG9tYWlucw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU0FQSWZvckNyYWNr","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluaW11bVN0YWNrQ29tbWl0SW5CeXRlcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNodGEuZXhl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"b3ppU1VjfmlXdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG5vSmEgdmFsaWQga2V5IFZu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlIdHRwMS4x","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UldmMUlGQ09tbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVySW5mb1RpbWVvdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hhcmVDcmVkc1dpdGhXaW5IdHRw","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U21vb3RoU2Nyb2xs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3FtSHR0cFN0cmVhbVJhbmRvbVVwbG9hZFBvb2xTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FybkFsd2F5c09uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uSFRUUFNUb0hUVFBSZWRpcmVjdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdFJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtVmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtVmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZFNlYXJjaEFsbERvbWFpbnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"mshta.exe:1932","strings":[{"value":"ISEhIFJFQUQgVEhJUyAhISEuaHRh","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWNjZXB0TGFuZ3VhZ2U=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRtaW5UYWJQcm9jcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3cgUHJvZ3JhbW1hdGljIEN1dF9Db3B5X1Bhc3Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dPbmx5RE5TUXVlcnlGb3JXUEFE","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzIFVzZSBNeSBDb2xvcnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzIFVzZSBNeSBGb250IEZhY2U=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzIFVzZSBNeSBGb250IFNpemU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzRHJhaW5PblJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QW5jaG9yIENvbG9y","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QW5jaG9yIENvbG9yIEhvdmVy","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QW5jaG9yIENvbG9yIFZpc2l0ZWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QW5jaG9yIFVuZGVybGluZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0NvbmZpZ1VSTA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0RldGVjdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b1Byb3h5RGV0ZWN0VHlwZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QmFkUHJveHlFeHBpcmVzVGltZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnJlYWtPbkluaXRpYWxpemVQcm9jZXNzRmFpbHVyZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnJlYWtPblJlY3Vyc2l2ZURsbExvYWRz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzSFRUUE5vQ2FjaGVDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzU1NMTm9DYWNoZUNoZWNr","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVMaW1pdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVNb2Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVQcmVmaXg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2VydENhY2hlTm9WYWxpZGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGVSZXZvY2F0aW9u","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xlYW51cCBIVENz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50QXV0aEJ1aWx0SW5VSQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50Q2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29JbnRlcm5ldENvbWJpbmVJVXJpQ2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tYmluZUZhbHNlU3RhcnREYXRh","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdFJldHJpZXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdFRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29uc29sZUJ1ZmZlckFsd2F5cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudCBUeXBl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVXJpQ2FjaGVTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1NTX0NvbXBhdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1ZMaXN0WE1MVmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1ZMaXN0WE1MVmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF5c1RvS2VlcA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdIZWFwRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdQcm9jZXNzSGVhcE9ubHk=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdF9Db2RlUGFnZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdF9JRUZvbnRTaXplUHJpdmF0ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdEFjY2Vzc1Blcm1pc3Npb24=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdENvbm5lY3Rpb25TZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlhbHVwVXNlTGFuU2V0dGluZ3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBEaWFnbm9zdGljcyBNb2Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBTY3JpcHQgRGVidWdnZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBWaXNpdGVkIEh5cGVybGlua3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUJhc2ljT3ZlckNsZWFyQ2hhbm5lbA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUJyYW5jaENhY2hl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNhY2hpbmdPZlNTTFBhZ2Vz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUV4Y2VwdGlvbkNoYWluVmFsaWRhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUZhbHNlU3RhcnRCbG9ja2xpc3Q=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUhlYXBMb29rYXNpZGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUtlZXBBbGl2ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU5UTE1QcmVBdXRo","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVJlYWRSYW5nZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNjcmlwdERlYnVnZ2VySUU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNlY3VyaXR5U2V0dGluZ3NDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheSBJbmxpbmUgSW1hZ2Vz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheSBJbmxpbmUgVmlkZW9z","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVNjcmlwdERvd25sb2FkRmFpbHVyZVVJ","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVN0cmluZw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVFbnRyaWVz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9tYWluTGltaXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RE9NU3RvcmFnZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFVzZUROU0xvYWRCYWxhbmNpbmc=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ0RlbGF5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbERlbGF5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbEluc2V0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJhZ1Njcm9sbEludGVydmFs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHVvUHJvdG9jb2xz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlIEF1dG9JbWFnZVJlc2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQW5jaG9yQ29udGV4dA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQXV0b1Byb3h5UmVzdWx0Q2FjaGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cDFfMQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cFRyYWNl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTGVnYWN5QXV0b1Byb3h5RmVhdHVyZXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTmVnb3RpYXRl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUHVueWNvZGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU3BkeURlYnVnQXNzZXJ0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5mb3JjZVAzUFZhbGlkaXR5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0ZU9wdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhwYW5kIEFsdCBUZXh0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RkVBVFVSRV9DTElFTlRBVVRIQ0VSVEZJTFRFUg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlyc3RSdW5Db21wbGV0ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJvbUNhY2hlVGltZW91dA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnRwRGVmYXVsdEV4cGlyeVRpbWVTZWNz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2Vzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyRXhjbHVzaW9uTGlzdEZvckNhY2hl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGVscGVyRGxsTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SHR0cERlZmF1bHRFeHBpcnlUaW1lU2Vjcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SWRuRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVDb21wYXRWZXJzaW9uSGlnaA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVDb21wYXRWZXJzaW9uTG93","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVGaXhlZEZvbnROYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVGb250U2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVGb250U2l6ZVByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVoYXJkZW4=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVQcm9wRm9udE5hbWU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVTYW5zU2VyaWZGb250TmFtZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVTZXJpZkZvbnROYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUVVSUZvbnROYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50cmFuZXROYW1l","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SXNUZXh0UGxhaW5Ib25vcmVk","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SlNjcmlwdFByb2ZpbGVDYWNoZUV2ZW50RGVsYXk=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFjdGl2YXRpb25Db250ZXh0c0FsaXZl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFsaXZlVGltZW91dA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVhc2hMZWdhY3lDb29raWVz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGlicmFyeVBhdGg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWwgQXBwRGF0YQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVRocm90dGxpbmc=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXIxXzBTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJQcm94eQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4RGVhZEFjdGl2YXRpb25Db250ZXh0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4SHR0cFJlZGlyZWN0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3ViRG9tYWlucw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU0FQSWZvckNyYWNr","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU1NlcnZlcm5hbWU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWlncmF0ZVByb3h5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWltZUV4Y2x1c2lvbkxpc3RGb3JDYWNoZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluaW11bVN0YWNrQ29tbWl0SW5CeXRlcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluaW11bVN5c3RlbVRpbWVyUmVzb2x1dGlvbg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWlzY0ZsYWdz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TW92ZSBTeXN0ZW0gQ2FyZXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNodGEuZXhl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVNwYWNlX0NhbGxvdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV4dF9DYXRhbG9nX0VudHJ5X0lE","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9DaGVja0F1dG9kaWFsT3ZlclJpZGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9GaWxlTWVudQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TnVtX0NhdGFsb2dfRW50cmllcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3BlcmF0aW9uYWxEYXRh","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3ZlcnJpZGVNZW1vcnlQcm90ZWN0aW9uU2V0dGluZw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFja2VkQ2F0YWxvZ0l0ZW0=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGxheV9BbmltYXRpb25z","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGxheV9CYWNrZ3JvdW5kX1NvdW5kcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ29ubmVjdExpbWl0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlUmVzb2x2ZUxpbWl0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRfQmFja2dyb3VuZA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJZA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlCeXBhc3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlFbmFibGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlIdHRwMS4x","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlPdmVycmlkZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlTZXR0aW5nc1BlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VEZWZhdWx0QXV0aG5MZXZlbA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVjZWl2ZVRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVuZGVyaW5nTG9vcE1heFRpbWU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Um9vdERvbWFpbkxpbWl0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UnRmQ29udmVydGVyRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZWRMZWdhY3lTZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUZpbGVMaWZlVGltZQ==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUZpbGVMaW1pdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUxvd2VyQm91bmQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VhcmNoUGF0aE1vZGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJlUHJvdG9jb2xz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHlfSEtMTV9vbmx5","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEV4dHJhQ1JMRg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZFRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsX0FjY2Vzc19OdW0=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVySW5mb1RpbWVvdXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbk1lcmdpbmc=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvblN0YXJ0VGltZURlZmF1bHREZWx0YVNlY3M=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hhcmVDcmVkc1dpdGhXaW5IdHRw","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvdyBpbWFnZSBwbGFjZWhvbGRlcnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1JlY3Vyc2l2ZURsbExvYWRz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2h1dGRvd25GbGFncw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U21vb3RoU2Nyb2xs","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0UmVjZWl2ZUJ1ZmZlckxlbmd0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0U2VuZEJ1ZmZlckxlbmd0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2lhbEZvbGRlcnNDYWNoZVNpemU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3FtSHR0cFN0cmVhbVJhbmRvbVVwbG9hZFBvb2xTaXpl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3luY01vZGU1","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFiUHJvY0dyb3d0aA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGNwQXV0b3R1bmluZw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VG90YWxMaW1pdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2luZ0ZsYWdz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2tBY3RpdmF0aW9uQ29udGV4dFJlbGVhc2Vz","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VU5DQXNJbnRyYW5ldA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VW5sb2FkRXZlbnRUcmFjZURlcHRo","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlIEFuY2hvciBIb3ZlciBDb2xvcg==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlX0RsZ0JveF9Db2xvcnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRGVsYXllZEFjY2VwdGFuY2U=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlsdGVy","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlyc3RBdmFpbGFibGU=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSW1wZXJzb25hdGVkRGV2aWNlTWFw","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VVRGOFNlcnZlck5hbWVSZXM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FybkFsd2F5c09uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uQmFkQ2VydFJlY3Zpbmc=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uSFRUUFNUb0hUVFBSZWRpcmVjdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uSW50cmFuZXQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdFJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uWm9uZUNyb3NzaW5n","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93c0VkaXRpb24=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZE92ZXJyaWRl","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZFNlYXJjaEFsbERvbWFpbnM=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyTnVtSGFuZGxlQnVja2V0cw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyU3BpbkNvdW50","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"WERvbWFpblJlcXVlc3Q=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Wm9vbURpc2FibGVk","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"TheDMR.exe.bin","strings":[{"value":"ISIjJCUmJygpKissLS4v","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ImJiSE1sR1d3aXhf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ImVzLTYteipvcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Iko8X3Q8PCR0OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ImplPFQ+IFpvSm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IzNFNjA1NXZYe2JX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"I1tLTmBvVWFQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JCAkSi5TICAk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JDRAMEQsMDQ0bA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JGV2PDJzNkxw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JHAtT01pZVNRakc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmVTTEpVNHJGQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmhDSDVTeVJIZGNKZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmxHazQvcCoiUm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"KTgqWitPfCxv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"K2luLSpUK1VN","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"K1A1clppb0tFQTAw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDRONSdFIiQ2S0s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LEV5TTBVNk8zTUxVNUdoY0N2TW4rK2E0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk5Ia2JkNTZFSDFUWTNxeGhGcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L3BnKShbfFg+SDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1JGbExMSnp1WQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1QvW3wpUCE/VWEw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OUFCMkVGJg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MDRUNjBsenNWRFpK","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MFV5WnRzWGhY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MHlYSjJjQUpx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MS94VkJTb3EzQ00=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTYzMmFwJ2cvNjQyQi43","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTZMRVVOSUNPREU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MUJjSXBUMG9QdQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MWc2NktZJFF4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MkozLHR1KjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Mk4zeU8vYVYzcmBY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"M3BuenA1WDJuSg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NDNtYTdMXGwySg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NGJVUFpTZGFMWlJwVGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NEg2TFJrTnJAak50TXZb","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NG1LenRad30n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NTFkSFZEazM0V09lamF0VUxYN002bjJG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NTY5NSs2SWtY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NX15bC1tLU91","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ni0mXCJmeDZR","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NjQsaVZCT1J3MEtHZ29B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NkRQUGZFaFB4TThqcQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NmkzZDNhWGFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Nm1NRXhzWmgkcmxNQ2Zk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"N0RBY2R2cUdg","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTgyLy9DV0ovQWtraEpsSkZNVg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OURNelc2eVZpeTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OUwyWDRkNXA2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OXIsIDhqRGdYaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OXJIJVAmWCdgKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OixPPk5JVnJAR0phNS95VQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyUoIDAgZSNCJkpJWEJ2NyhRNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O0BXbjh6OWtaekFiIGF5a0VkWkx2Tg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O2IvbC9ZNGQr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnIHN0YW5kYWxvbmU9J3llcyc/Pjxhc3NlbWJseSB4bWxucz0ndXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEnIG1hbmlmZXN0VmVyc2lvbj0nMS4wJz4gIDx0cnVzdEluZm8geG1sbnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206YXNtLnYzIj4gICAgPHNlY3VyaXR5PiAgICAgIDxyZXF1ZXN0ZWRQcml2aWxlZ2VzPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSdhc0ludm9rZXInIHVpQWNjZXNzPSdmYWxzZScgLz4gICAgICA8L3JlcXVlc3RlZFByaXZpbGVnZXM+ICAgIDwvc2VjdXJpdHk+ICA8L3RydXN0SW5mbz48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PS5SPTF0Sz0zRGs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PTkwNjggOVI3OHJrSEgwSEA4OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PVF3SVFRV1NQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"P2woaHwuP0FWTg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QCQ8IChsNDQh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QDZRIVJuUVUxQlZ4and2OFk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QDogdGhpcyBvYmplY34=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"W1NyeVgxaTUyKw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XTcsKjVNTHZsTWZPQjlfVQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XXFIOXdMbndu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XndGdz52YH51","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XzhaZ3VVMTBWRg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2EuMlRvKDUw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X25OTk5OW0g1Iw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YE5GUENvWCB3Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YFl0Nzl5VnNRb1NF","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWBUQ2J5K3RZMWFL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWU4Szl2VFd2TTlMYmxONGJlWm4v","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUVTTklvU0Uy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YUgraDRHR09Xd1JKaWlUeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXl4NjN4KzY2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkQyR1EvRld0Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qk9CVy82K1E7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QlMxJkJSMUkvWzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnN4Ylp8OENw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QlRQXmh3dWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Yy8wWy40O0g4JiAoOkk3Ljk6LCEgLzMwLT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzNNJlBSc3hZako=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2dZTG1YYkhwMCZ4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2g3OHZsZ2RaaG1z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y0xCeGxNY2gzcFJEMTBeeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q0xmVzNzUDlpYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2x0T2tJSlZBZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3JpQHInbThhZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvZ3JhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3VDejhhajhjcUxWajl4QmtPR1k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3p3QjlvT29i","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGd1Wm1aYmM1dnZibnJNR3dqVnNBdXZ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZFlSXFw5ZnJZ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RStYVFk4ZDNvOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RTFVUG9EOUEx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RV0wOUhoc0Ja","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZUMvMWVmQk9Kbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZUhDbDFkcWpwVjJscU8yaWJ2RVBSU3E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWxfc2ltZC5jQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZVZgeHp5ZzJqY1FM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ri9xK2YyNUd5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmNTdUY4NytkMS8wcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmRCM3E5QyYlNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmVNdXRMU0hDdF5VT1RF","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9nRTBGanNhM25TYkQxYjBieA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZlBlOTkzN3UvZmRQbmpZMk4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RlZWMDdlZkY3dGVHcjBHUCo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Zz9nZmVycjs5ZGRvY2I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0hJSktMTU5P","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2hpamtsbW5vcHE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R09iZ2NWNXFOcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3E2dGpicnd4cGJLbkRDRXdqXg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aDZZaDhNRkxMeDFUMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SD5gMSRIY2ggJyY8ZWd5ZVt2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEBNVEYqI2BO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SENWdjZNZXp2aGBS","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEkkSkRaVEYqI1xT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aE1XNCtMOmF1MlY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aFRxZStGTjdpTWIkZkFROERn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SFgkPyIoPEBQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"STBSL0puQk5I","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXRDPEx0MzxUdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SiYqUiBHISsw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SjJVWnMwb0VDdmNmYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SjZMemZwWnZmSQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"azJPSUFLVjNPTnA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2MvJlU2RSZJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2U2RUFBb3Bd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2Y1ZFFoMG1WSHNnVkwk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3AqJUk9dVAzZSQ4Qg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3ZVeCR1eVNQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S3dPdFE6T09TQGx0NVFYVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TENJRFRvRUcrRg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TS9IbUZiZ2RMRGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bTNQL1VwQnM0T1FtakB6MitUMFpQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bTV2MmJOKzl6VG5pLzN5ODho","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWRpbHUkelRkcFM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVpe09MZ0dM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXcyN1F6cDIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bmJCaGdQS245SlM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmNsS3NVd15yLw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bkNyR0JqK0Rv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bkRlUE1xQUQzdlg2VlVMaDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bmczbjVaOEUwL1o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bm1BbWpMQXFadXVo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tk5OTk5OTk5OTk5O","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bzFhRUtlejBudjc0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2JGJDVYREdWdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2kodE5SQVI1Kw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2lDUTdkVjNYfERu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2lrSGl4SDlBJmlnYnE+aCo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xVVnFyWVJBcQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b211bHRpcGxlIGNoYW5uZWxzdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T05FX0FORF9aRVJP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T1gzOFFZeGxi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3ltditvTmhMKHJt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3ppU1VjfmlXdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3slMHg5R1RzMF4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cC1DUllQVE9QUF84XzJfMEppam5kYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEtDU19QQURE","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG5vSmEgdmFsaWQga2V5IFZu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9FanpWZDdDaFJx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UE9OP007OTk5TUxLSm9tcnJySklI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cFprL2NaUDB0RklETA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cXBvb29uTk5uJ20/bGxr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cjBNLzY4ZzZzdmFHNVkq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UkJWSEg3WjBQZEZUVm42Lw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ckRUNEQySDJmVA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlBoU1hHTDVyPlE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UldmMUlGQ09tbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UllLdEF0TlM3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hFTEwzMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1dpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2trdkxrVWlO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c21fTWNteFo8Z0c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3VQY0N3b1N4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VCpySDRyeW5MbFU4MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VC8+cFRJaVZCeDE2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dDQ8Png8LXQsPGF8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGJHMnQoM3VSM1doU1NDbTB4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dEJOXGMoOEU3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VExgTmxPeFAjRw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VE9WMVB3QU1QdHE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHRhbVRobnNNYXRp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHlOZnpYLnZsPiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VUpiYVJsalpCQUg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBFYURrTVpIUXFDQ0tuYjZ6NTdHdUdXeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXNlcnNccnBpcGNcRGVza15wXA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"djVNTXZQdTNqdnpTNDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dkRURCk0LjAxRU4n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFByb3RlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VklzbFlaWTlmaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VnZnZERWdVMxWVZHNHhIS3RnajZwc1MwWXY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VyMsR3g0RXw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzBOYCIlbE4t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzRsMGw6Y2hg","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzhKZjd8NldSalM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d15zOFFNKysmNGtM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2p2WnpLVGpZOEZo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0xnOUQqalVIbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2xrQVR1WVZ1TXc4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V205amorbTFHTW8yUlBiMVo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d21CVzFoSVNINSx3YllCWDFRQkhy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d21QbGZ2emkyb0JIemZHVQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3Q8enUxeSo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d1lQZzhDTkFvQmVHMEc5eTc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WEVFZzd6UW1RSg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eFJVbEVsclY4VU9EYjBC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WHZ1ZWAyUUxZY3E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eFdOaHYzWXg1YWp4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WHprclJnRDg5Yi9rRG9T","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eTZhazg4dmlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WVBFIEhUTUwgUFVCTElDICct","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WVhXV29WbicnJ1VVVD9T","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eks5Q1UzRDR4bA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WndWZC5YYCFo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WnpEbk16S3dNN1BrTnhqKA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"elpUPDBCVEJW","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fkRNVXN1eDgwZ29g","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fn59b3ZycnJ8fHt6Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"TheDMR.exe.bin","compromised":null,"detection_total":null,"total":null}]},{"name":"mshta.exe","strings":[{"value":"IkM6XFwhISEgUkVBRCBUSElTICEhIS5odGEi","type":"Ansi","source":"Process Commandline","process":null,"filename":"mshta.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_6.png","strings":[{"value":"JydfX18sLF8saWlp","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"LCxfX19fLF9f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"LC4sXywsLC4sLiwsJyxf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"Xy1fXy0tXy0xX21f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X18wQGZpb19maW9fQA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fMDBvX19fX19fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fXzBfX19fX19fX19fX18wX19fX18w","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX0AsX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18wXzBfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18wX18wMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18wX19fX19fX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBfXzBfX19fX19fX19fXzA=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX19xMF8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX2Zpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX2Zpb19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fZmlvX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19maW9fX19fQCdfZmlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19maW9fX2Zpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X19pLl9fXzBfJydpaV9fLA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X0FnX250LkRtUl9wcl9vbm1haV8uY29t","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19AX19fX0BfX18w","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19fX18wXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19fX18wX2Zpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19fX19AX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19fX19fX2Zpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"X2Zpb19maV9fZmlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"YzEnMC4sX19fX19x","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null},{"value":"ZmlvXzBfX19fZmlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_6.png","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_3.png","strings":[{"value":"LCxfLCwsdj9fLF8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fX19fMDBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"XycwP19fX19fXzA=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"XzBALF9fX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X18wQGlpb19paW9fQA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fLF9fX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fMF9fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fXzBfX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18/X2lpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fMF9f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fMF9fX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBfXzBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX2lpb19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19faWlvX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19paW9fX19fQF9paW8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X19paW9fX2lpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X0FnZW50LkRtUl9wcjB0MG5tYV9fLmMwbQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpaWlfaWlfX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19AX19fX0BfX18w","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19fX18wXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19fX18wX2lpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19fX19AX19fMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19fX19fX2lpbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lpb19paW9faWlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null},{"value":"aWlvXzBfX19faWlv","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_3.png","compromised":null,"detection_total":null,"total":null}]},{"name":"TheDMR.exe:3236","strings":[{"value":"Ly93azlaWVJhZjhRdXFqV25xMUFLLzRQbWxDaXBmQzNiaEs2WVBST0NQNzdudkVXUXo2V3l6QU0vQzYzanZkb1lzUjZDVExPWkl5c1dwcmo3MGJRazVUT253MTk5V1hxaGlIdS9aL2lPZnByakRiVC9BNXBUSWlzV0J5SEsxdXEweVdZVTFSNnlZcGtYYU4rRXBvMUZZWlh3ejlHVVJFbk93dG1QUjB0Q0o5bnBZeUl5Mzg1NjJNZjdOWnFTS0JJTCsyVjhmeUhMRXBjWk9pa25waXhIOUFWQ2lnYnFLQktMUHhCYWk2WWw4VlpMN3hkVVVwYmFSbGpaQkFINlBKcXlLSzI=","type":"Ansi","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"PCFET0NUWVBFIEhUTUwgUFVCTElDICctVzNDRFREIEhUTUwgNC4wMUVOJyAnaHR0cDp3d3cudzMub3JnL1RSL2h0bWw0L3N0cmljdC5kdGQnPjxodG1sPjxoZWFkPjxtZXRhIGNoYXJzZXQ9J3dpbmRvd3MtMTI1MSc+PHRpdGxlPkFnZW50LkRNUkBwcm90b25tYWlsLmNvbTwvdGl0bGU+PHNjcmlwdCBsYW5ndWFnZT0nSlNjcmlwdCc+d2luZG93Lm1vdmVUbyg1MCwgNTApO3dpbmRvdy5yZXNpemVUbyhzY3JlZW4ud2lkdGggLSAxMDAsIHNjcmVlbi5oZWlnaHQ=","type":"Ansi","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDhBNC0tNjU4Mzk4MjUyLTgxNDc0NzYzMi0xODQ5NTg1MzAwOTY0MTQ3ODkwLTE0NTI4MDk3MDgxMzQwNTcyNjYwNjI3MTA3NTUxNzYwNTY5MjYx","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YW5kIGZpbGVzIHNob3VsZCBub3QgY29udGFpbiB2YWx1YWJsZSBpbmZvcm1hdGlvbi4gKGRhdGFiYXNlcyxiYWNrdXBzLCBsYXJnZSBleGNlbCBzaGVldHMsIGV0Yy4pPC91bD48L2Rpdj48ZGl2IGNsYXNzPSdub3RlIGluZm8nPjxkaXYgY2xhc3M9J3RpdGxlJz5Ib3cgdG8gb2J0YWluIEJpdGNvaW5zPC9kaXY+PHVsPllvdSBjYW4gYnV5IGJpdGNvaW4gZnJvbSBoZXJlOjxicj48YSBocmVmPSdodHRwczpsb2NhbGJpdGNvaW5zLmNvbS9idXlfYml0Y29pbg==","type":"Ansi","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":1,"total":72},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXotQ3lybC1BWg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXotTGF0bi1BWg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YnMtQ3lybC1CQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YnMtTGF0bi1CQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVuZ2luZQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZXMtRVNfdHJhZG5s","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsRmxhZw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aGEtTGF0bi1ORw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aXUtQ2Fucy1DQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aXUtTGF0bi1DQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bW4tTW9uZy1DTg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGly","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cXBzLXBsb2Nh","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cXBzLXBsb2Nt","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItQ3lybC1CQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItQ3lybC1DUw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItQ3lybC1NRQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItQ3lybC1SUw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItTGF0bi1CQQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItTGF0bi1DUw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItTGF0bi1NRQ==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ItTGF0bi1SUw==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGctQ3lybC1USg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dHptLUxhdG4tRFo=","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dXotQ3lybC1VWg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dXotTGF0bi1VWg==","type":"Unicode","source":"Runtime Data","process":"TheDMR.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"cmd.exe","strings":[{"value":"L2Mgc3RhcnQgJVdJTkRJUiVcc3lzdGVtMzJcbXNodGEuZXhlICJDOlxcISEhIFJFQUQgVEhJUyAhISEuaHRhIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"cmd.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"!!! READ THIS !!!.hta","strings":[{"value":"$2a","type":"Ansi","source":"Dropped File","process":null,"filename":"!!! READ THIS !!!.hta","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"P19fOz8sX19fZ3FfLDks","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"Xz9fXz9fP3Y/X19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]},{"name":"mshta.exe:1752","strings":[{"value":"P8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvT/Dr8K/wr3Dr8K/wr3Dr8K/wr3Dr8K/wr3Dr8K/wr0=","type":"Ansi","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RFhGZWF0dXJlTGV2ZWw=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtRGV2aWNlSWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtRFhGZWF0dXJlTGV2ZWw=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtUmV2aXNpb24=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtU3ViU3lzSWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtVmVuZG9ySWQ=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtVmVyc2lvbkhpZ2g=","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V293NjQtVmVyc2lvbkxvdw==","type":"Unicode","source":"Runtime Data","process":"mshta.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]}],"image":[]},"http_requests":[],"ftp_requests":[],"irc_requests":[],"strings_resources":["http://localbitcoins.com","http://localbitcoins.com/buy_bitcoin"],"tags_details":[],"sample_flags":["Extracted Files"],"suricata_alerts":[],"version_info":[],"apk_info":null,"apps_info":[{"name":"Access","product":null,"version":null},{"name":"Acrobat Reader","product":"Adobe Acrobat Reader DC","version":"18.11.20038.267465"},{"name":"Chrome","product":null,"version":null},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.4756.1000"},{"name":"Firefox","product":"Firefox","version":"57.0.1"},{"name":"Flash","product":"Shockwave Flash","version":"27,0,0,187"},{"name":"Hancom Office Hancell","product":"Hancom Office Hancell 2010","version":"8, 5, 8, 1207"},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.9600.16428"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1510.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.4763.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.4754.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.4762.1000"}],"architecture":"32 Bit","document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":"UPX v1.25 (Delphi) Stub","file_imports":[{"module":"KERNEL32.DLL","functions":["ExitProcess","GetProcAddress","LoadLibraryA","VirtualProtect"]},{"module":"SHELL32.dll","functions":["SHGetFolderPathA"]},{"module":"USER32.dll","functions":["ShowWindow"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[],"language":"ENGLISH","authentihash":"7059daa2dbfe85c1316d49c9bcddd7244fe0e1cefb9a960876d878375414678f","entrypoint_bytes":null,"pdb_timestamp":null,"pdb_pathway":null,"pdb_guid":null,"file_sections":[{"name":"UPX0","entropy":0,"virtual_address":"0x1000","virtual_size":"0x4f000","raw_size":"0x0","md5":"d41d8cd98f00b204e9800998ecf8427e","characteristics":[]},{"name":"UPX1","entropy":7.92471124661,"virtual_address":"0x50000","virtual_size":"0x30000","raw_size":"0x2f600","md5":"9bb026463f56c210525c89e7a1820661","characteristics":[]},{"name":".rsrc","entropy":4.22214972283,"virtual_address":"0x80000","virtual_size":"0x1000","raw_size":"0x400","md5":"b1917d4f83bec8fbc7d76f56c792cb5d","characteristics":[]}],"file_exports":[],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[{"name":"RT_MANIFEST","rva":"0x8005c","size":"0x17d","type":"XML 1.0 document text","language":"english"}],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[],"email_headers":null,"classification_tags":[],"tags":[],"submissions":[{"submission_id":"5df62133aac52c0e2d29c36e","filename":"TheDMR.exe","url":null,"created_at":"2019-12-15T12:04:03+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Not all sources for indicator ID \"api-55\" are available in the report","Some low-level data is hidden, as this is only a slim report"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5df61fa2ba9297590d2cc51a/download/files/report_json","file_size":348779},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5df61fa2ba9297590d2cc51a/download/files/memory_strings","file_size":7979},"certificate":null,"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5df61fa2ba9297590d2cc51a/download/files/network_pcap","file_size":6812},"memory_dumps":null},"system_resource_monitor":{"cpu_usage":[{"x":0,"y":90.7899},{"x":1,"y":10.3125},{"x":2,"y":73.5376},{"x":3,"y":10.5469},{"x":4,"y":42.5028},{"x":5,"y":81.7656},{"x":6,"y":91.5191},{"x":7,"y":10.8594},{"x":8,"y":71.6296},{"x":9,"y":13.2031},{"x":10,"y":11.1719}],"memory_usage":[{"x":0,"y":13.0427},{"x":1,"y":12.9778},{"x":2,"y":12.9743},{"x":3,"y":12.8309},{"x":4,"y":12.8181},{"x":5,"y":13.7417},{"x":6,"y":14.936},{"x":7,"y":14.9263},{"x":8,"y":14.923},{"x":9,"y":14.9328},{"x":10,"y":14.929}],"disk_read":[{"x":0,"y":499311},{"x":1,"y":184435},{"x":2,"y":90835.2},{"x":3,"y":122173},{"x":4,"y":4856.6},{"x":5,"y":59227.6},{"x":6,"y":2103660},{"x":7,"y":527133},{"x":8,"y":114658},{"x":9,"y":75728.3},{"x":10,"y":23734.5}],"disk_write":[{"x":0,"y":1036580},{"x":1,"y":740977},{"x":2,"y":292573},{"x":3,"y":463038},{"x":4,"y":53081.1},{"x":5,"y":308120},{"x":6,"y":1230350},{"x":7,"y":1366690},{"x":8,"y":624436},{"x":9,"y":287423},{"x":10,"y":51884.6}],"network_packets":[{"x":0,"y":0.741297},{"x":1,"y":1.07209},{"x":2,"y":0.693018},{"x":3,"y":9.76365},{"x":4,"y":7.33648},{"x":5,"y":31.0126},{"x":6,"y":30.7432},{"x":7,"y":10.549},{"x":8,"y":3.01779},{"x":9,"y":31.6543},{"x":10,"y":3.23416}],"page_file":[{"x":0,"y":239608000},{"x":1,"y":237162000},{"x":2,"y":237249000},{"x":3,"y":234107000},{"x":4,"y":233959000},{"x":5,"y":236634000},{"x":6,"y":245596000},{"x":7,"y":245248000},{"x":8,"y":245068000},{"x":9,"y":245699000},{"x":10,"y":245428000}]},"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["3e3bb3fa705247fdd41c0a73a52683049948e383b082fc6c7e0fba06cf9097bc","aba6cfb774b8a747d1c63a939037d1c8b429d615de62497e1d30d3cd786625ec","17f746d82695fa9b35493b41859d39d786d32b23a9d2e00f4011dec7a02402ae","949485ba939953642714ae6831d7dcb261691cac7cbb8c1a9220333801f60820"]}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Trojan.Generic — Falcon Sandbox Report — Score 100/100 — Sample 3e3bb3fa7052… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sandbox report 5df61fa2ba92…. Malware family: Trojan.Generic. Threat score 100/100. 6 malicious and 13 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/3e3bb3fa705247fdd41c0a73a52683049948e383b082fc6c7e0fba06cf9097bc/5df61fa2ba9297590d2cc51a"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic — Falcon Sandbox Report — Score 100/100 — Sample 3e3bb3fa7052… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sandbox report 5df61fa2ba92…. Malware family: Trojan.Generic. Threat score 100/100. 6 malicious and 13 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/3e3bb3fa705247fdd41c0a73a52683049948e383b082fc6c7e0fba06cf9097bc/5df61fa2ba9297590d2cc51a"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic — Falcon Sandbox Report — Score 100/100 — Sample 3e3bb3fa7052… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sandbox report 5df61fa2ba92…. Malware family: Trojan.Generic. Threat score 100/100. 6 malicious and 13 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2b","11",{}]]