24:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/3h6zdc-it88if.js","/_next/static/chunks/2vw2j18d9u3gs.js","/_next/static/chunks/3l_wb6il5gi_h.js"],"ReportDetailWrapper"] 36:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T550,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Gen:Heur.Ransom.Imps — Falcon Sandbox Report — Score 100/100 — Sample 4cae449450c0…","description":"Malicious verdict for sandbox report 5ef8c94e41a8…. Malware family: Gen:Heur.Ransom.Imps. Threat score 100/100. 11 malicious and 14 suspicious behavioral indicators across 47 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458/5ef8c94e41a80103a733e72e","keywords":["Malicious","Gen:Heur.Ransom.Imps","sandbox report","malware analysis","MITRE ATT\u0026CK","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458"],"about":{"@type":"SoftwareApplication","name":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","applicationCategory":"PE32 executable (console) Intel 80386, for MS Windows","identifier":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Gen:Heur.Ransom.Imps","sandboxEnvironment":"Windows 7 32 bit","behavioralIndicators":{"malicious":11,"suspicious":14,"totalSignatures":47},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T570,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26:T5b4,"\Sessions\1\BaseNamedObjects\{D95F2E78-F3BE-C23B-D36C-22049F8C33A8}" "\Sessions\1\BaseNamedObjects\.NET CLR Data_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\.NET CLR Networking_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\.NET CLR Networking 4.0.0.0_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\.NET Data Provider for Oracle_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\.NET Data Provider for SqlServer_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\.NET Memory Cache 4.0_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\.NETFramework_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\ASP.NET_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\ASP.NET_4.0.30319_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\aspnet_state_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\BITS_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\ESENT_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\Lsa_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\MSDTC_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\MSDTC Bridge 3.0.0.0_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\MSDTC Bridge 4.0.0.0_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\MSSCNTRS_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\Outlook_Perf_Library_Lock_PID_b1c" "\Sessions\1\BaseNamedObjects\PerfDisk_Perf_Library_Lock_PID_b1c"27:T4e1,Spawned process "cipher.exe" with commandline "/w:Z:" (UID: 00346458-00004000) Spawned process "cipher.exe" with commandline "/w:C:" (UID: 00346460-00003128) Spawned process "wevtutil.exe" with commandline "cl System" (UID: 00346460-00003088) Spawned process "wevtutil.exe" with commandline "cl Application" (UID: 00346460-00001476) Spawned process "wbadmin.exe" with commandline "delete catalog -quiet" (UID: 00346461-00002136) Spawned process "bcdedit.exe" with commandline "/set {default} bootstatuspolicy ignoreallfailures" (UID: 00346463-00003516) Spawned process "bcdedit.exe" with commandline "/set {default} recoveryenabled no" (UID: 00346468-00002632) Spawned process "wevtutil.exe" with commandline "cl Setup" (UID: 00346468-00001272) Spawned process "fsutil.exe" with commandline "usn deletejournal /D C:" (UID: 00346476-00000380) Spawned process "wevtutil.exe" with commandline "sl Security /e:false" (UID: 00346477-00002964) Spawned process "cipher.exe" with commandline "/w:D:" (UID: 00346478-00001100) Spawned process "schtasks.exe" with commandline "/Change /TN "\Microsoft\Windows\SystemRestore\SR" /disable" (UID: 00346481-00002908) Spawned process "wevtutil.exe" with commandline "cl Security" (UID: 00346482-00002820)28:T4e1,Spawned process "cipher.exe" with commandline "/w:Z:" (UID: 00346458-00004000) Spawned process "cipher.exe" with commandline "/w:C:" (UID: 00346460-00003128) Spawned process "wevtutil.exe" with commandline "cl System" (UID: 00346460-00003088) Spawned process "wevtutil.exe" with commandline "cl Application" (UID: 00346460-00001476) Spawned process "wbadmin.exe" with commandline "delete catalog -quiet" (UID: 00346461-00002136) Spawned process "bcdedit.exe" with commandline "/set {default} bootstatuspolicy ignoreallfailures" (UID: 00346463-00003516) Spawned process "bcdedit.exe" with commandline "/set {default} recoveryenabled no" (UID: 00346468-00002632) Spawned process "wevtutil.exe" with commandline "cl Setup" (UID: 00346468-00001272) Spawned process "fsutil.exe" with commandline "usn deletejournal /D C:" (UID: 00346476-00000380) Spawned process "wevtutil.exe" with commandline "sl Security /e:false" (UID: 00346477-00002964) Spawned process "cipher.exe" with commandline "/w:D:" (UID: 00346478-00001100) Spawned process "schtasks.exe" with commandline "/Change /TN "\Microsoft\Windows\SystemRestore\SR" /disable" (UID: 00346481-00002908) Spawned process "wevtutil.exe" with commandline "cl Security" (UID: 00346482-00002820)29:T9fa,".exe" opened "C:\MSOCache\All Users\{90140000-0016-0409-0000-0000000FF1CE}-C\ExcelMUI.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0016-0409-0000-0000000FF1CE}-C\Setup.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\Setup.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\Setup.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-001B-0409-0000-0000000FF1CE}-C\WordMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.en\Proof.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.es\Proof.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.fr\Proof.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proofing.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Setup.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-00A1-0409-0000-0000000FF1CE}-C\OneNoteMUI.xml" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-00A1-0409-0000-0000000FF1CE}-C\OneNoteMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\OfficeMUI.msi" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\pss10r.chm" with delete access ".exe" opened "C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\setup.chm" with delete access2a:T520,Spawned process ".exe" (UID: 00342209-00002844) Spawned process "cipher.exe" with commandline "/w:Z:" (UID: 00346458-00004000) Spawned process "cipher.exe" with commandline "/w:C:" (UID: 00346460-00003128) Spawned process "wevtutil.exe" with commandline "cl System" (UID: 00346460-00003088) Spawned process "wevtutil.exe" with commandline "cl Application" (UID: 00346460-00001476) Spawned process "wbadmin.exe" with commandline "delete catalog -quiet" (UID: 00346461-00002136) Spawned process "bcdedit.exe" with commandline "/set {default} bootstatuspolicy ignoreallfailures" (UID: 00346463-00003516) Spawned process "bcdedit.exe" with commandline "/set {default} recoveryenabled no" (UID: 00346468-00002632) Spawned process "wevtutil.exe" with commandline "cl Setup" (UID: 00346468-00001272) Spawned process "fsutil.exe" with commandline "usn deletejournal /D C:" (UID: 00346476-00000380) Spawned process "wevtutil.exe" with commandline "sl Security /e:false" (UID: 00346477-00002964) Spawned process "cipher.exe" with commandline "/w:D:" (UID: 00346478-00001100) Spawned process "schtasks.exe" with commandline "/Change /TN "\Microsoft\Windows\SystemRestore\SR" /disable" (UID: 00346481-00002908) Spawned process "wevtutil.exe" with commandline "cl Security" (UID: 00346482-00002820)2b:T570,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2c:Tc3a8,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2d:T558,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2e:T514,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:T520,w4PCv8ODwr5HcmVldGluZ3MsIFRleGFzIERlcGFydG1lbnQgb2YgVHJhbnNwb3J0YXRpb24hUmVhZCB0aGlzIG1lc3NhZ2UgQ0FSRUZVTExZIGFuZCBjb250YWN0IHNvbWVvbmUgZnJvbSBJVCBkZXBhcnRtZW50LllvdXIgZmlsZXMgYXJlIHNlY3VyZWx5IEVOQ1JZUFRFRC5ObyB0aGlyZCBwYXJ0eSBkZWNyeXB0aW9uIHNvZnR3YXJlIEVYSVNUUy5NT0RJRklDQVRJT04gb3IgUkVOQU1JTkcgZW5jcnlwdGVkIGZpbGVzIG1heSBjYXVzZSBkZWNyeXB0aW9uIGZhaWx1cmUuWW91IGNhbiBzZW5kIHVzIGFuIGVuY3J5cHRlZCBmaWxlIChub3QgZ3JlYXRlciB0aGFuIDQwMEtCKSBhbmQgd2Ugd2lsbCBkZWNyeXB0IGl0IEZPUiBGUkVFLHNvIHlvdSBoYXZlIG5vIGRvdWJ0cyBpbiBwb3NzaWJpbGl0eSB0byByZXN0b3JlIGFsbCBmaWxlcyBmcm9tIGFsbCBhZmZlY3RlZCBzeXN0ZW1zIEFOWSBUSU1FLkVuY3J5cHRlZCBmaWxlIFNIT1VMRCBOT1QgY29udGFpbiBzZW5zaXRpdmUgaW5mb3JtYXRpb24gKHRlY2huaWNhbCwgYmFja3VwcywgZGF0YWJhc2VzLCBsYXJnZSBkb2N1bWVudHMpLlRoZSByZXN0IG9mIGRhdGEgd2lsbCBiZSBhdmFpbGFibGUgYWZ0ZXIgdGhlIFBBWU1FTlQuSW5mcmFzdHJ1Y3R1cmUgcmVidWlsZCB3aWxsIGNvc3QgeW91IE1VQ0ggbW9yZS5Db250YWN0IHVzIE9OTFkgaWYgeW91IG9mZmljaWFsbHkgcmVwcmVzZW50IHRoZSB3aG9sZSBhZmZlY3RlZCBuZXR3b3JrLlRoZSBPTkxZIGF0dGFjaG1lbnRzIHdlIGFjY2VwdCBhcmUgbm9uIGFyY2hpdmVkIGVuY3J5cHRlZCBmaWxlcyBmb3IgdGVzdCBkZWNyeXB0aW9uLlNwZWFrIEVOR0xJU0ggd2hlbiBjb250YWN0aW5nIHVzLk1haWwgdXM6IHR4ZG90OTExQHByb3Rvbm1haWwuY29tV2Uga2luZGx5IGFzayB5b3Ugbm90IHRvIHVzZSBHTUFJTCwgWUFIT08gb3IgTElWRSB0byBjb250YWN0IHVzLlRoZSBQUklDRSBkZXBlbmRzIG9uIGhvdyBxdWlja2x5IHlvdSBkbyBpdC4=30:T558,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31:T514,R3JlZXRpbmdzLCBUZXhhcyBEZXBhcnRtZW50IG9mIFRyYW5zcG9ydGF0aW9uIVJlYWQgdGhpcyBtZXNzYWdlIENBUkVGVUxMWSBhbmQgY29udGFjdCBzb21lb25lIGZyb20gSVQgZGVwYXJ0bWVudC5Zb3VyIGZpbGVzIGFyZSBzZWN1cmVseSBFTkNSWVBURUQuTm8gdGhpcmQgcGFydHkgZGVjcnlwdGlvbiBzb2Z0d2FyZSBFWElTVFMuTU9ESUZJQ0FUSU9OIG9yIFJFTkFNSU5HIGVuY3J5cHRlZCBmaWxlcyBtYXkgY2F1c2UgZGVjcnlwdGlvbiBmYWlsdXJlLllvdSBjYW4gc2VuZCB1cyBhbiBlbmNyeXB0ZWQgZmlsZSAobm90IGdyZWF0ZXIgdGhhbiA0MDBLQikgYW5kIHdlIHdpbGwgZGVjcnlwdCBpdCBGT1IgRlJFRSxzbyB5b3UgaGF2ZSBubyBkb3VidHMgaW4gcG9zc2liaWxpdHkgdG8gcmVzdG9yZSBhbGwgZmlsZXMgZnJvbSBhbGwgYWZmZWN0ZWQgc3lzdGVtcyBBTlkgVElNRS5FbmNyeXB0ZWQgZmlsZSBTSE9VTEQgTk9UIGNvbnRhaW4gc2Vuc2l0aXZlIGluZm9ybWF0aW9uICh0ZWNobmljYWwsIGJhY2t1cHMsIGRhdGFiYXNlcywgbGFyZ2UgZG9jdW1lbnRzKS5UaGUgcmVzdCBvZiBkYXRhIHdpbGwgYmUgYXZhaWxhYmxlIGFmdGVyIHRoZSBQQVlNRU5ULkluZnJhc3RydWN0dXJlIHJlYnVpbGQgd2lsbCBjb3N0IHlvdSBNVUNIIG1vcmUuQ29udGFjdCB1cyBPTkxZIGlmIHlvdSBvZmZpY2lhbGx5IHJlcHJlc2VudCB0aGUgd2hvbGUgYWZmZWN0ZWQgbmV0d29yay5UaGUgT05MWSBhdHRhY2htZW50cyB3ZSBhY2NlcHQgYXJlIG5vbiBhcmNoaXZlZCBlbmNyeXB0ZWQgZmlsZXMgZm9yIHRlc3QgZGVjcnlwdGlvbi5TcGVhayBFTkdMSVNIIHdoZW4gY29udGFjdGluZyB1cy5NYWlsIHVzOiB0eGRvdDkxMUBwcm90b25tYWlsLmNvbVdlIGtpbmRseSBhc2sgeW91IG5vdCB0byB1c2UgR01BSUwsIFlBSE9PIG9yIExJVkUgdG8gY29udGFjdCB1cy5UaGUgUFJJQ0UgZGVwZW5kcyBvbiBob3cgcXVpY2tseSB5b3UgZG8gaXQu32:T520,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33:T558,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34:T514,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:T520,w4PCv8ODwr5HcmVldGluZ3MsIFRleGFzIERlcGFydG1lbnQgb2YgVHJhbnNwb3J0YXRpb24hUmVhZCB0aGlzIG1lc3NhZ2UgQ0FSRUZVTExZIGFuZCBjb250YWN0IHNvbWVvbmUgZnJvbSBJVCBkZXBhcnRtZW50LllvdXIgZmlsZXMgYXJlIHNlY3VyZWx5IEVOQ1JZUFRFRC5ObyB0aGlyZCBwYXJ0eSBkZWNyeXB0aW9uIHNvZnR3YXJlIEVYSVNUUy5NT0RJRklDQVRJT04gb3IgUkVOQU1JTkcgZW5jcnlwdGVkIGZpbGVzIG1heSBjYXVzZSBkZWNyeXB0aW9uIGZhaWx1cmUuWW91IGNhbiBzZW5kIHVzIGFuIGVuY3J5cHRlZCBmaWxlIChub3QgZ3JlYXRlciB0aGFuIDQwMEtCKSBhbmQgd2Ugd2lsbCBkZWNyeXB0IGl0IEZPUiBGUkVFLHNvIHlvdSBoYXZlIG5vIGRvdWJ0cyBpbiBwb3NzaWJpbGl0eSB0byByZXN0b3JlIGFsbCBmaWxlcyBmcm9tIGFsbCBhZmZlY3RlZCBzeXN0ZW1zIEFOWSBUSU1FLkVuY3J5cHRlZCBmaWxlIFNIT1VMRCBOT1QgY29udGFpbiBzZW5zaXRpdmUgaW5mb3JtYXRpb24gKHRlY2huaWNhbCwgYmFja3VwcywgZGF0YWJhc2VzLCBsYXJnZSBkb2N1bWVudHMpLlRoZSByZXN0IG9mIGRhdGEgd2lsbCBiZSBhdmFpbGFibGUgYWZ0ZXIgdGhlIFBBWU1FTlQuSW5mcmFzdHJ1Y3R1cmUgcmVidWlsZCB3aWxsIGNvc3QgeW91IE1VQ0ggbW9yZS5Db250YWN0IHVzIE9OTFkgaWYgeW91IG9mZmljaWFsbHkgcmVwcmVzZW50IHRoZSB3aG9sZSBhZmZlY3RlZCBuZXR3b3JrLlRoZSBPTkxZIGF0dGFjaG1lbnRzIHdlIGFjY2VwdCBhcmUgbm9uIGFyY2hpdmVkIGVuY3J5cHRlZCBmaWxlcyBmb3IgdGVzdCBkZWNyeXB0aW9uLlNwZWFrIEVOR0xJU0ggd2hlbiBjb250YWN0aW5nIHVzLk1haWwgdXM6IHR4ZG90OTExQHByb3Rvbm1haWwuY29tV2Uga2luZGx5IGFzayB5b3Ugbm90IHRvIHVzZSBHTUFJTCwgWUFIT08gb3IgTElWRSB0byBjb250YWN0IHVzLlRoZSBQUklDRSBkZXBlbmRzIG9uIGhvdyBxdWlja2x5IHlvdSBkbyBpdC4=1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"job_id":"5ef8c94e41a80103a733e72e","environment_id":100,"environment_description":"Windows 7 32 bit","size":159744,"type":"PE32 executable (console) Intel 80386, for MS Windows","type_short":["peexe","executable"],"type_short_id":"exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","md5":"fcd21c6fca3b9378961aa1865bee7ecb","sha1":"0abaa05da2a05977e0baf68838cff1712f1789e0","sha256":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","sha512":"e39c1f965f6faeaa33dfec6eba23fbfff14b287f4777797ea79480bb037d6d806516bda7046315e051961fce12e935ac546819c1e0bef5c33568d68955a9792a","ssdeep":"1536:7ZLTzASUIG0TOOYTufIaSWvRYkekdvizSBXxNe9VPw6s6aUCT7Q7qn:OBI9HYyfNBdviGBBQsrhPk4","imphash":"93736e6ffcbf0a539a73e55e921de1cb","entrypoint":"0x401690","entrypoint_section":".text","image_base":null,"subsystem":null,"image_file_characteristics":[],"dll_characteristics":[],"major_os_version":null,"minor_os_version":null,"av_detect":54,"vx_family":"Gen:Heur.Ransom.Imps","url_analysis":false,"analysis_start_time":"2020-06-28T16:46:13+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":false,"certificates_validation_message":"No signature was present in the subject. (0x800b0100)","domains":[],"compromised_hosts":[],"hosts":[],"total_network_connections":0,"total_processes":14,"total_signatures":47,"extracted_files":[{"name":"!TXDOT_READ_ME!.txt","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\!TXDOT_READ_ME!.txt","file_size":2034,"md5":"4f8cc0ec3b5be13683db70ad25e526a1","sha1":"8b9259e90096d3db005dc62f6dfa98d6f3866b30","sha256":"4fadb9b629e3d1c290aef74c69e172abf9184d2bd5568ad4e3612370d6235563","sha512":"2fc2421a772597d7f424522f1f9d8a419d5f770915647b72cd974ac0140955bfc2d00da2df82be2ad55fb044873acd950364e6aa232f28794e5bf7d202ced703","type_tags":["text"],"description":"Little-endian UTF-16 Unicode text, with CRLF, CR line terminators","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5ef8c94e41a80103a733e72e/download/dropped-file?key=6b102e37397ad6f762218349460514a03c1bada55609f2303f4228705ea20a96524e181603623ae51c893d509162a3e592bb269bc894f7cd3de5ab71e4cab39076f600fc51fa47b133b4ce788f58","submit_link":"/bff/report/5ef8c94e41a80103a733e72e/submit/dropped-file?key=6b102e37397ad6f762218349460514a03c1bada55609f2303f4228705ea20a96524e181603623ae51c893d509162a3e592bb269bc894f7cd3de5ab71e4cab39076f600fc51fa47b133b4ce788f58","has_overview":false,"extended_details":null},{"name":"GDIPFONTCACHEV1.DAT","file_path":"%LOCALAPPDATA%\\GDIPFONTCACHEV1.DAT","file_size":156376,"md5":"9816aef87967d6fddfe1511e53573dd6","sha1":"9eb3c29eeca03adcf24c68a002ccc3f62ee9858a","sha256":"1c1bf86e140a95fffb22aaca5539946451c974947597c928bfd9f927080a7abc","sha512":"3654a50f727054e1884ecb4aa914884924d036f6fc1a38c43810e9a2e8bddbb15326dd3b15475cd959e2d81d975dfcd05f9ddc4e37546cc4d08b4fe10dd2d801","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"filA161.tmp","file_path":"C:\\EFSTMPWP\\filA161.tmp","file_size":4718592,"md5":"65ddd328ae389ed8dc804326283604f2","sha1":"821937f946b0fceb920cb784f95d168deaaf94d8","sha256":"7971f869259aee9bd631bba70e10a49cf66fea3ac7fd16126a064111f87da460","sha512":"3e66fe41b531872d3d10ea8410f541331f5fade3f0c1e76a716504d7bbb2573f374b73770e888a505226a43ba8350e32c44e1a99feb399cf3ef634342cb20b64","type_tags":["unknown"],"description":null,"runtime_process":"cipher.exe (PID: 3128)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":true,"extended_details":null},{"name":"ExcelMUI.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.msi","file_size":1802752,"md5":"11b7a81aa3a23ae30f6716daa6fbba41","sha1":"8455bc74f9c352c5668444a7a6fbb43a49afdd65","sha256":"fed7c3840fa32b5ecced59d345bef4cbf605377dcb4de73466ff37d325f1c665","sha512":"ce50401350cc1d462063d667af39d125d790929621dd0b023903a60ccebc56becbc560ce4e8519220442a07f62d830f597a21d1df09a0ce4fb819fe10bf1e639","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"ExcelMUI.xml","file_path":"C:\\MSOCache\\All Users\\{90140000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml","file_size":2077,"md5":"162f03c209adae2b0e6d356a13c016e8","sha1":"3bdfcc2efa0dc88a518a6c263a8b9f330e57ec45","sha256":"67036675b8e19037591689158e21b03fa97de0298518b8fe961713e6ac8d8116","sha512":"2dc48ba75dfb44e9651157d98c99231b64b68dddc55677b86167507224e523c76df552d62d7116fb835f8ed2d98c582700b16396aa7cd068e7f88e11567fdf69","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"PowerPointMUI.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.msi","file_size":1801216,"md5":"1ae1e0b59075ae18b7b2f51592fc3e50","sha1":"74350030b266628e6e8b36da7c36cdfd420d4bb8","sha256":"4c948e1c3ed7b64eda21e0d8307ee19d5b79ea4747931ba37f837a8c6d3c32e0","sha512":"7a5144335c396bca092243eca869944f12e42bb94fb51fae7bc12d77218a61b01b9ef05b2f69167d98b0bcd4c5bbaa567137f1b5139e1f10038c0c1cd44e564e","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"PowerPointMUI.xml","file_path":"C:\\MSOCache\\All Users\\{90140000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml","file_size":2069,"md5":"c215967768f04ff5e95d565d19dedd7a","sha1":"c28c5d2c034ef228691e7cd5d95bb5531b6f5039","sha256":"867c4bf440fcf7b20d1ba728d96f8225175068aec1fb1d0199f9ef57d35f7012","sha512":"956e0600ea3369af02de2d6754165979f3b04bca01e2f839b1f2122dc33cc7ff327baea2c19cdc570859b52ebdcd40e6807eb7a357d7d253bb76780476ebd56b","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"PublisherMUI.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.msi","file_size":1811456,"md5":"aa778d840ec2e0c01d44c243c4e4fc3e","sha1":"3731748e92401022039a3eabee674244bbf68bd8","sha256":"2924ac2e4ad573a45df3dcac6599a9f691c6952500ae9d43fa62690500cba829","sha512":"cac9be0182af4dc68cbaa53c6ed39b75fa59cf4ef6371171eaac377eac951c8cde802f57a37af223bee01e559c32dde952b2683c0c58da44ba991872bc466aa8","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"PublisherMUI.xml","file_path":"C:\\MSOCache\\All Users\\{90140000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml","file_size":1962,"md5":"ca4b1c975aaf25547c0c8bcdc0c1187a","sha1":"af956334700fe42f5886ae665265db756cf5852a","sha256":"b8694f32b6901592b349f5d34d9369b9e85575548f6ab4bb44ac3c875f521607","sha512":"db0009bb88d71af1442fb092ba807be26874864a7cf1489945f38f6fbb5ab15e714a387581309728b4ff738984e93e4dfd5c5bea5d6f84193c90ef86f9bd23ec","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"OutlookMUI.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.msi","file_size":2116096,"md5":"fa0713202226b428697861d88f0d8171","sha1":"0ad588950d0bf69d829cd24a68470369897e5006","sha256":"e2fffaa2c5ad30075cbe9bf51140cd4f3dc8e44eb3143c5fd00cd579704227ed","sha512":"c53dd993e207e0965a96eaa2cb53dcaa77aa00019e8a42b8bbfbea6366c400c5ef31cca8d52d46d690d4851e1a8b304a648baae839cafc113038ac0c432bb97e","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"OutlookMUI.xml","file_path":"C:\\MSOCache\\All Users\\{90140000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.xml","file_size":3698,"md5":"6e16566dc91e96732e4a24afefd16f52","sha1":"f3ee447dfcfc035de24e66e5977acfb8f0b9c6d6","sha256":"24c5272c0953466fe092efc24920f5d55102d12e9a22179f414dea208fb55eac","sha512":"c3d2ae1033bcf0647792210dda52d53d6b300d85bce1afe464de77b203eaabadc1108d372d27cfdde3a868a333cfeb2d0dfad3feb63575a125ed9b977ad83662","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"WordMUI.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.msi","file_size":1820160,"md5":"d2438f38e798113cdf25c90ee01ff5d5","sha1":"03bfc0ceb5b518a03f9de868799a43cf1647a699","sha256":"c138162127b9b13f29c4e73ea03cc7907a19bb6a51fdfa325fca62a739d40125","sha512":"d13679fdb30d3071581a016f886f1c283f67beda237e8aae7ab83d9ee25e05c71d6004a9e30c5ec90c19fb7f54151e916a09ba407227a7865246e193afbe07c3","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"WordMUI.xml","file_path":"C:\\MSOCache\\All Users\\{90140000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.xml","file_size":2312,"md5":"341a5e8d0e5641fcb01a035fd6911840","sha1":"a2c99a2bd895e1532fef557514d3a5221c5d6337","sha256":"7fdd979e3af40df646e0549184714e3f0fa80025aa7ca1aa595bd7edcfe891f8","sha512":"85c9a9fb462235c207717a264156daac3ebc2f0c863c5582014cf7935de072d7c29833b85a90fb95cd951bcca0bb3305b4edefc15204fc3cc23c26afb4589aa5","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Proof.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.msi","file_size":668160,"md5":"e4a80b8c6e5f02af3362f6dc7da78f72","sha1":"b071bc49a968139bb4fb926f9469fc001c0f3be5","sha256":"917c8c65a76e1411f5b3022386c8127ad821758cfa494c8bb38c8aa159408494","sha512":"32cbb5fbc72faa23af1cf0695d0e8f8db4e068f29e3d854ca49aae49bc6d7dafb82611c481a99a5fa09a892f411adccee4f298f39b8c314936dce0d1e2461e34","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Proof.xml","file_path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.xml","file_size":1970,"md5":"1d2fd2f0fb11a702a807f7539f7578f0","sha1":"3736b76c9a20e2a09d6b43381d91b85d528ef9ac","sha256":"9eaa4ee40fb95a8d51313d94a1a7e0a6d6de16f52d2a78be41c0bc3e918fe71c","sha512":"b9badce4a918c57d9dd1b1374c6bbcf555e47f0469c2e2d02776689dd4bac48e391f3d52fe958c3c33959dbbabea96a74711a29ee0904bf154d67874d759d2a3","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Proofing.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proofing.msi","file_size":650752,"md5":"0eb316fc70d31c2a5787687ade15b8fb","sha1":"7de710f0559526f289b3cd6751b3fdb6253b31b9","sha256":"a192e06aaa5a408ba43e9a942d7a394dc2df22ee32f81ee1b3acd5591dcd02b3","sha512":"4038449d1db38d8b3cd3b5bebd2363e7f6ff20008d87568478cc85d13da37eba4d90d6eb7b7c7042464855a83c8cc42b6baa804dc1038ac6e825259b6a3876b7","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Proofing.xml","file_path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml","file_size":1323,"md5":"801e598195b04e0630a680f9c91e594c","sha1":"53ac98ddd6d5fd1747f3c169617d434ed614bf61","sha256":"cc2817662d3ed7915c04e304eb6156f81946023b558b35c5bf4e8d806c8a99b0","sha512":"02d30633d80c46f5ec368e922b901b46aba32039d16f02d5ff644aa478e095c35242a69def76a678bad28de9d6c07eb3adbe3ef223ef342305eb1fad4dfdc513","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"OneNoteMUI.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.msi","file_size":1801216,"md5":"2cd4ce1e9a9632577735b8bacb49a1a0","sha1":"dd526d6929dab6a0b9488897f6e8572cc5ee1985","sha256":"57ece8148d22a20fbf6a682cb65ccbb76b6f18b09be09c41a9bb34bcd7b456b9","sha512":"481ed0b7b2deadbf73282d30c913585ce686d9d381f4ff4ea0da5442605032c8dc3402a6d8fd56de20da6a3a0855b23189cd7728965d938dbcb44c34612d82a9","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"OneNoteMUI.xml","file_path":"C:\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml","file_size":2118,"md5":"e0a01c4ca423c34e957335b4ddb49da6","sha1":"37141f5525b26e64c2124bbe385ef6cd6dc012b6","sha256":"4a873e63f0c78722953f0b88f87624434a6fb81d7460f940c14c5492b7a78755","sha512":"737846ead95f88c059bcf63ab0959f6cf732cd56cd8152878914666f0358146d14e7e0c28ffb425d6fcc14535449866e2b2d2938d89538dadca76cdba1ff8d79","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Microsoft.VC90.CRT.manifest","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest","file_size":2369,"md5":"b18adb3994a818757399e5edcde360b0","sha1":"bdc6bf5c544e05f0671aac6f295f8f1ea7d04456","sha256":"141840cae84ccb9d1f595d392200fb3a0110a88bc479c9e6bc4952223a9bf406","sha512":"31baabb99c70dca591a68114b850f53054db89106af4a51a8c2d9f36bf147d94d6e1260085666424f70f3211a62ea69dc38941155c5f89537d6e5a694311ceee","type_tags":["unknown"],"description":null,"runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"OfficeMUI.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.msi","file_size":2863616,"md5":"09dfc478fc831d62ef19704c0f8b11c7","sha1":"b0d4b42ff03aa868ed2e058d934be2e1a5b140f4","sha256":"d8df2667eb1784ddc11350425a87f7e18e6ed37cc28ba7621bf12493410b37d4","sha512":"4c013748438e91358732a8b783964e71b9c6b3343895a5bde5d9b6e0d64592022a62e9bfd15af9a9072d8e7626cafc3c6021c86748b72b63e6431c6f2fd12c45","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"OfficeMUISet.msi","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUISet.msi","file_size":650752,"md5":"bdf797f45222b1719dd046f3f72b1600","sha1":"a1c8c6b6f7c82650413a478c40081488e6e65f90","sha256":"310d779f157824db96f828d95c29668d99bf25166c655bcd3d6408bf12ec22dc","sha512":"1b48df8ddfcc156eba9b6429ed28a46b4f77dbdfe621bfb91e7d22cea5039d5a0cd977e614b96ce7429a4b4b6c574c9d7da61b2c5b7a70f14c8318e270225879","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"ShellUI.MST","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\ShellUI.MST","file_size":4096,"md5":"2e5777dc5875e4d22c49421c286a654d","sha1":"efafee05de9bb9f5b6741391364fa6b2d9150a1c","sha256":"55c057153931baf9bcc4599f49853e039bb38c92cc960cc4c222a859c78c4d0d","sha512":"1860b287933e8423b1d1e7dd412d66ded9b0434c9d15157ffc81204a235a610defe49949aea3f2ce7df6a50ab0ee3f23384032f61226f863296eeb5d5ece144a","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"pss10r.chm","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\pss10r.chm","file_size":27707,"md5":"50ad321d3e40176fcfa21b078bec1769","sha1":"09a390d7b8be6cae4b4dd8e8a554b90ed237bb88","sha256":"29fc2b8e71d05959437889e374381c2969e6394d8d1f3298c361b76329f34a76","sha512":"ce4e84126b4df9f6498bf6c1fc2dab108c24e1cf1a33bbeb87158bf4af2b2111c805b06164389b56223cd61bfcee6534bcd9d404206fcfc421b73b430f78bccf","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"setup.chm","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\setup.chm","file_size":67702,"md5":"8d26d8b2e9cb2dda6ad839d2ebf713bb","sha1":"a4579784e33a9ebedf38d7b74708e41ff49e8634","sha256":"52a595a7cd516a1cbceec0a5e73981722f6c33d60ee452bb3ae8e239600eab4e","sha512":"1d362aa1bc252466578696e7a638874273400b1876707b1ebda3f53a8b2d39dffb41ed31dc081bce5b94de9a9d196b5b2ada80e43719c13373726f479f971c39","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Office64WW.msi","file_path":"C:\\MSOCache\\All Users\\{91140000-0012-0000-0000-0000000FF1CE}-C\\Office64WW.msi","file_size":3025920,"md5":"fee120a535a0391f86fd2fbee2740748","sha1":"3661c1ea653a852f2a630f8da3941593affda5e4","sha256":"382cfb6adc18f17978fcadff8490713ff1544004e5e6ffbd51f79eed8459799d","sha512":"d3981ec1aa9ae979013f8e74c842ea61f81f5c24032035dfaa8d334e5f984d2716cd3949ca76e9c09a588e6729628b870a6d083dd7d653fe5337efb862de6dcb","type_tags":["doc","office"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"SrO3gl0EN9SPZi43.doc","file_path":null,"file_size":230912,"md5":"4b3e7846db3dc12043093208ff702fe0","sha1":"889af4e4b5d9212ea252663df5d9bf3aa4196325","sha256":"a123ce03203f4710af686c497d98903146e29f2be1325f3d6725fd1ed1239ae2","sha512":"5dbc69ed9762c67c9fa6029e8213593d936652cecf1b6c39671f92375286866686baa579b882597c469ff9a86cd30c520e0ba94d0c87524dff8b3b8f5897f07a","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"dSTEZHvd.doc","file_path":null,"file_size":3183104,"md5":"7a1ef9c8b4cf04608d5cfa85fdc5519e","sha1":"1fc5b0368edd0752c478434c1a998ec8a384f2cc","sha256":"c5f6929cb67111568c1ad0d0046b34832e0e07358f83d81239ffd381aecf7565","sha512":"f7f0881c6a39a0c10b4285e89500f0112e2eda7021ef6bb2ca118a7efbd793b79e789881b84abbf6d60e9bb089bbf356a0dc0daa75087ea1d8fb48a9c31ea0a3","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"h8fg9WRouk.doc","file_path":null,"file_size":2980352,"md5":"c6ef1fb95a23ba7b65cb77b5d6681fb7","sha1":"a5ae0617486588c5249df4296998236d7c252cff","sha256":"a1a4b13221d842e365ed72cf3f7213446c5515353482f268c03a2e4b87eefb8b","sha512":"97102518029ff6ec745f0bef420ae1c4ab8081f614d0fcb39ac572672cc3cef49a185a8c9c9f386e96969fdd2720a2f637f55462d1d82c8a73bdfaa96f3684e9","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"OCXh75SGcr7.doc","file_path":null,"file_size":2298368,"md5":"52bff9a9fef823db1cba4e8d529f3f20","sha1":"2ef893a10129220b85f11eeb23279018de6a002f","sha256":"f7bfc9bd7beebf35dd942d0e77d656d05111c9e68740c8ff2a0f23f20b573c2f","sha512":"daea29c662f878c108e1c1042d3be7285cf807814107c7ab9ded31e4faaf185e11bcdd59dba51a4b2e30661a94af334610dd919ac102cbede701825242bad833","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"dsYny5bq4UJV.doc","file_path":null,"file_size":4272640,"md5":"7917d94459978136868a67a217b98a65","sha1":"a1ab0af4ac05df4929c235ee5becc84f146f672c","sha256":"a8e69bb95570491815a7c577c48482ad9c5fdd119523433ee7ebd2e5675c479b","sha512":"2233f78a3f83b7084bcc4ed24046bbd6d9cda3e4f57d678f106295e6fe32cebe564585539da1249a81f94b607c8f31285fb323a09c2f905a1f22d72ed79e7cdb","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"TTjDpaUqzIMaB0g.doc","file_path":null,"file_size":2392576,"md5":"aa5ba7f1ff9929dcc6735163546bd7e0","sha1":"624f274e603a272feb1e4e060a5969f995154716","sha256":"84407e8413e05122dea542bdb6ca8ddd59d72272a4c9f59731ff9b6542155760","sha512":"d16fb91e2949c1d76763f971cd30d8bf3ef7e47b5d7057bcf884ba1f78e08a4fcd35b059acd1be985236b51eb6026dfbe30e02debcd7025e32c45e6c4495dc09","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Kty1hE.doc","file_path":null,"file_size":126464,"md5":"2c9a878f1d7e9af859930da3314f33ad","sha1":"45b7a946e3dbd548061b520a719bedbdd84b6ebf","sha256":"e6d629d10ad77dc8139aac946d02ce5839866952babf57614f9457eabdde893b","sha512":"cf5dea906aa397f110c940cbeb68733bfe4a823886cd3f67293e1d83345a21f30555e6a8d34c957de354dcbdb4bbcfca0b415e1da9dd1bffcfee9c94eb242a10","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Ho7euGVfWh.doc","file_path":null,"file_size":1221120,"md5":"7c4ccc7d064be8b2d401ee83d3abbde9","sha1":"4f86436d5abdd4fcf18461459d8d4c326abb7286","sha256":"82cbbff361398325a68f01efb461594725506dbf5e3a6116fe321c8fecae01e3","sha512":"1512e75be9270c66e21e00425702fb092cd2f1c701f0ecc706a41ab322846f33600bfff8992a8afbc916d786cfd55cc011795a801b9f74f45dbf7e3acce02248","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"SvUAzGFIQ9qYfc.doc","file_path":null,"file_size":303616,"md5":"03540d0046ae66edf53d7f8b639a9a57","sha1":"1693502891a469b2f623d05ddebf18f3f2de31d8","sha256":"680e4955e33be6e1c3cd01fbcbe42dc32a25d10bbf3a3cd9a63e9703009b3873","sha512":"3773b1ff84a56cb3351ffeb0496f14e151909be01ec963e896c77d0fc733ecace48a0478b1e1e9d801c1290ee40edc4b28cfe4b3b523e6d028076a8b60190ef5","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"YfkuO.doc","file_path":null,"file_size":5033472,"md5":"25252a461011a6c9196d2b3c12b36f35","sha1":"f1211bb9ebe36e5fd406bea63190019907572622","sha256":"129871a21843f5aad93f3c4296015e4e83903585094955c46dd3b3a094e84534","sha512":"c039c51ed0b92ecfe60267440877657f0ff34e01399d07efdda9ad1fd5b740d9f018d0d9ce58f78ad10cdf1a27324657f2a7a5bb17ae323723f2a30f93e5f4c1","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"hgUOm8vUl.doc","file_path":null,"file_size":2918912,"md5":"1cbc86b61287b96b14bfd0601bff7348","sha1":"7aa71619c0272f7dd7d54cdb879f3345e83d0f2f","sha256":"de5d13d5d87b5e35871c5e4706729f7bc1cfb0fa148be4f859712cb0ae5fc194","sha512":"87358444b9cc10e8a7274851fa4db398819dce32368020fbd26ff33b1b4db0b379227c39bfaaab21b9005b00d8c7ed93195f6b443c7654c28188ad231801afa9","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"THQujKln.doc","file_path":null,"file_size":4953600,"md5":"894620ba513e8a4b28a62300212a7341","sha1":"d10647895c2b56890fbd4b26a7fc471220d92b2e","sha256":"db68183d45c21d5055b02feaa7c341e7d4a211b915ec86ab8c48843c943d9aa9","sha512":"18732f49a50aa868c66d34c90bdeaee32677d7166e1bcb8dbcac316665b584b6bb07c457f960bee5a5121cf9a96f33361af512d0fa2d2d43d82b1421ad5620e4","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"giDj6Q.doc","file_path":null,"file_size":893440,"md5":"51e4cbc0820b79f70c6e00fae5c203a0","sha1":"fc5926abb604754d6844b455bd0b3dfd6007720c","sha256":"5f9d1b7bc182b88221263eb861e2710004d7b0cfe38e355d167b5c510f959643","sha512":"65eecf14b50454ca103c2e4d68223422252c2f92803fffadc901a01e3031f82a8aba70527e8f05217a15f353598d79f0fcce433da845db9ad64dee2318111d95","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"KQNwhwsYVN.doc","file_path":null,"file_size":197120,"md5":"b2a5424a8a02f4429e260aee6c36a0cc","sha1":"7ea747b7f42bea4e79d4bfc41efaa9d013ad43b6","sha256":"4b62adc1507f9760556b21eab70755959e82f7e00723ae2a42264f3b65cc5a39","sha512":"64d050c68d7e47fc8e98fce801539011c88e35339b3d62cb09548907aaa64108a70ae19fdf9bd2a0bedd4fdacb7282471d7b9fc824b4b362e3c993dcfa2144a5","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"DP001GCJ.doc","file_path":null,"file_size":2836992,"md5":"6332edb17f2586a59df581242fa6318e","sha1":"8f4f9fc474b7024127f10704323bb33ac62bc896","sha256":"ed7ba238d7f476fbdf117d0ae723213ed9d789e46217ce655a10dbaeb4df6b60","sha512":"657cd349c8100e4f7a11108bcbd23cdeba92b2c5ae2f236126136dce448803a5d4393e2fbea948abae6b6d259e1fe674beb03bd83822019b648dd02bd8fbf82c","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"gBiUJ4TRATi57.doc","file_path":null,"file_size":4401664,"md5":"7568e582988ead1f08e18eb24e35d1f7","sha1":"bcb00418028810541bcbd5f273321ea9f373da0b","sha256":"cd9ff170e1ee8ad48cb9ac7d926ca30e02b397fa0e996fa8ff0830bbcb7e1b42","sha512":"9f3a2dda81cb87e880052abc5050c9e52e786940bfaa0ab3e96bede44d738be157396976b44c2ddfc155f3ce212111c008a789f2dfc25309bf159138e8134e9d","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"MCLvMmDoz8.doc","file_path":null,"file_size":4921856,"md5":"789989196d1c0d0948b5144270357115","sha1":"484a4a547dc6dba938e073fc4c6e5504056e2e04","sha256":"1a7ba3959aa1cfbff29104e6699df712b3a92612b2d62ccb857793f850f71937","sha512":"f123f5df222c42d8ab6e938c74ff216bdaccc68cd4d7ecd6e999089c2955f69299e1ba18a710aa33342f3870ab068f9af8e84411fd5ad78c6bcdb7992ab20d04","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"GuVY23qj2s4Td.doc","file_path":null,"file_size":1484288,"md5":"167b4aa61efe18b4c04621acd6c08463","sha1":"0a6ab7e2ee22e1411a6d01cc8725e4073746d2dd","sha256":"4fe2db07766f07c899a6a15ca95b4913d708820eeaad64f4b1b63d7abbfa4f84","sha512":"6de197c459d4212d777f026d26042d679a325e21226d54d5f4d758131af9b94eb7fba16fb858bde2f9f9c812c63cce78101ed954b4614b6c8ff214f3dd0ad51d","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"H5uM4HShGf.doc","file_path":null,"file_size":1091072,"md5":"832bc87ed8656395de90bd6c82f01a85","sha1":"a1f1e3b7e0f45bf4e95fb4874d1b5db87d826fa8","sha256":"eb7aaef31da4d4a885e63e453a856883207adbcb27929003668c3d1eb27d8744","sha512":"f09c278ba2ea460ecdefdeb4f4e80c360373636b15bff2db04332c88de1915f8c2992ad5807d1ba5b3ce8d1ababecda7df684ee87cd151231b23c295c870adf4","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"xH1o63B9xkJUw.doc","file_path":null,"file_size":226816,"md5":"b38ec34ff62a0818cb25df2e52b4ffaf","sha1":"21a4bd5632f7c85c2cdf1c29bd5d2b5ddfc3997c","sha256":"a8400a5eba3c8463065984b8656b274a47b96278a7949abb9d7c1bb1ff4fff8c","sha512":"34fcee4aa656982ccf017a6ec7e94e44bf8671f07cb0db30b4d0b0a45f7c89faba33fd73b6f1d28bb3ce35a507dcc10e2261b2c2f9b842076f693145c95f9203","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"0YdED8h4YnKljVf.doc","file_path":null,"file_size":258560,"md5":"1400240fb3c15de5274a48aae4414f13","sha1":"c2e17df858d85727a56ec58ed2c02471e7d6ed16","sha256":"c40e98038feb933ce4ae36cfd488d32ab912a788fc722b68470dfa721e8990e7","sha512":"f86c5f445e2cac94c2494eb731d22fe840410cf5324c4fa94bd97182c0e435411b52139bf2a5a0ad725fa6a3a310b653de02826b78371301310a609c54ddc690","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"QwHQtYTLWgvQ.doc","file_path":null,"file_size":3932672,"md5":"9a142d782e8c0e77b048ae16a93b842f","sha1":"8434ec35432155fdecd13be6e3eaf1255447742f","sha256":"b889a2f4edc93b2f3c962756d53bfdedf20b906eca7e44f7768fdb16c6b424de","sha512":"8a81ef7ffd54b7ef0574998f69d1fed95bbf0fd14001d2fa5701ad50b37541b79c528a0248a30c1730c0822bf536835077fa9d2e76f7257b67842984f2a30328","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"L8yloyiM6okRPgbd.doc","file_path":null,"file_size":1956352,"md5":"1e88d8ec91d98199139699f288a483a9","sha1":"382f7b676f83ff72fdb56be5398464570b61741b","sha256":"5531125705058e5a3dedf95ec11d8f76ec01b81c583f1f151ab659d47becaf9f","sha512":"e9ea3cce3cb8160ac5665badb99e04e0766c6251842acc3bcd1e7261b3361b08e87d3129dcb584238588d8b8e1a1fcdcc382644973be711be4628ea7b7a3bf96","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"lKxIrwOivZM.doc","file_path":null,"file_size":3354112,"md5":"ca1a1223a4054b5f2832f8454b3f36dc","sha1":"f653c8604452bd9d79193a4249c8b64216bd02ef","sha256":"22b6d2772a9aa72cc47a7d1087ed67df984db320a1c8e836165362b13a4ce12d","sha512":"2fa9716582dd9247f11b5356f574d654f75219b9aec8ec8770264dd0ab257618322dcb06685b564a496c8204326fb2767025fa69515f8ddb2bc41bcb65487417","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"DcNNjRAkEraNbP.doc","file_path":null,"file_size":4444672,"md5":"3261e78cd90e06a51b424c5927f369a2","sha1":"16fce8354d978e9a9cfac296037ef5d807fdfa9f","sha256":"374a645c36d27bd175c46c3735449422059c0a9b29d33ecb067e3710ced67f43","sha512":"c8f15f97a24bad925b71b5885e07d8d15fb6445e9f300d193e54767f651ec32f90bd2b3862de4889a7cb20b837be30413603bf2c0c07aaa697ce0c77d6e22303","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"oBqqx89Mp9N.doc","file_path":null,"file_size":4419072,"md5":"2b6ea6248bda517f74426dc65ce1e7c8","sha1":"9a8888b53f2e58e003862c0a75f963fbf776dc6c","sha256":"680eca1885ec56740f8a7cde4cefc3f87e245cd6bfbcb48050d378997154d507","sha512":"eab1730bbcb1a3d95d9dffb2cad3b6df70a618c5ddf1f1e4e24cc5cd2cda93d6f89946dc257bfb44e5248b844a630ca552e96ebf592880de7caae856fd9e3463","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"ZUwXv.doc","file_path":null,"file_size":651776,"md5":"b17aa50630c474407cf051e2d40838c4","sha1":"608a04b281e15094ff4715b351065ae9104c4f1e","sha256":"c2a1f60888b6279b2aecada6c9fcbeea74303d1e9c1de03eb3147f272b495d99","sha512":"66fb40398365a410b01dbe0dab7c46419119ebf223e902b3614e1bf6a72274ccc039d15ee61075bdbeaeaaf3c798741089bad5c9c6bd013371dac67c71468bea","type_tags":["text"],"description":"Non-ISO extended-ASCII text, with very long lines, with no line terminators","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"ppGWUpWSWorQZ.doc","file_path":null,"file_size":538112,"md5":"6ab3f8b1b570a32673c55c74c77e355b","sha1":"ea90e84cb4d3e7b0c6b4d860370f3459e49ddfe0","sha256":"bc65567847272489019a9de6332e3dadcd186dacf0c8335254777aef45545d99","sha512":"12fb1031c387308f0ade64a08094695fb28115d417c82aa925d7bcd235a8896ba890eba69e07733e5826b80cb4efc9b6c7558c7354e97419d5001dcafaf9dd73","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"zIjQMqSEj24HleX.doc","file_path":null,"file_size":104960,"md5":"977d784804d1f72770997fa37422176f","sha1":"3129e68cdc0895d3d470c6104e7c849e7aed61f6","sha256":"9cc93759cdf0f9e80a1c6cb2a8b44e358bc42bd372283d537271e1cbc998bf4d","sha512":"a4719d4e20f6992ccff86ed4878ab3c21dfaaf3fb194adca454dd18298d8746754db7390bd4f5095eafe223d857dc2b932c0f359899a0518540bdb0850d2dccb","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"cUJpjDsZO.doc","file_path":null,"file_size":2289152,"md5":"31b60691813cf65b7000e4bdb8cb9112","sha1":"7871699ecabe6dafc928a267279413d04182db45","sha256":"b40a29635806815f70b88abdd064fe0d475a051988516ec2dd25de8c4c95525c","sha512":"1a7379a127436b1a60af4a77f4943a4b5eb907a9d70d9d6aee5d8757cc7be7112733a959ca5dbf7554f5f29dfb0801820dcc0ff067ab71a75bd0169584699d5d","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"PaGnOfAFV.doc","file_path":null,"file_size":4751872,"md5":"5a4e2d8e714aaf8c9a683099d6a70f29","sha1":"ce1064e6b4ba2f84a657a3f624895242355eb6fc","sha256":"fc2e9a6bd3272c12d78182bd9b422a72f5d16a81a9ab579b379db84cda116a70","sha512":"9a05fcdcb50eea55905e61ab1f3d9761c8490c81e3c4fbb9873287de7042f01b8a56cabb0b9c23d0e9b821ed9eb6f3a72d6939f1f3799989b84def29156fec67","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"IOR7TqkslejAq91.doc","file_path":null,"file_size":332288,"md5":"0d8f461287abc40edce18312097a7716","sha1":"b071f6e4a96db18757ef27eff33ff31899e9d791","sha256":"8635eed824fe3cc09f75dd33986d06312375e190279662c2b15c2a8fcbd4a136","sha512":"baadcc7978f1becdd8426bebe092cba1f192707cffd985b754c9f0340224ba56fdc559687cf4c2eef2d8e2eadef26e5941f586f3bba617e548ebfe7bf6634d4d","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"rcKxZC.doc","file_path":null,"file_size":735744,"md5":"a082050e84cecd5d8b132fa58fa6fc0a","sha1":"64d8e54c2107bd570dc8f3aae9ea439172544ed0","sha256":"f004033c022bb2c6bd2a73442465ab01c487f2d0ebe022da948f2c76fdd2b96d","sha512":"07891cc6c8a7191b21c0acaae5c021c5826fab9f1c31e5b08671a049200e42cc3c2c9e1a891434a488724dd1b792b14b0e853eb57b5131d3ccfd80c49f40b4ac","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"WHJUHaHxBnS.doc","file_path":null,"file_size":242176,"md5":"54f5a72055bd47fc87875ee60c638957","sha1":"bd84173b613976c16a30490d128c6a79c576fd88","sha256":"3cbe6465b1a44ea1730b5f610f9343e0c71376d9da997f1fdf4feb1c69b28fb2","sha512":"d77dc357b0bd1a903576d01eb6503ad682b187466de472d2b0b904d8a41dd6ea98d30bafedb9d588224c04e7e68277ce92a04b44e5e6e52b31eeeee6104fdf56","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"sIz9IMypdNES8St.doc","file_path":null,"file_size":4014592,"md5":"340a44f66137becf9f8869e53ed901e7","sha1":"7d2d378818d313de4ecf601e7dcaa96f27d1530f","sha256":"2aa8c68ba039f93de0aa0e8d304280003d3eb42cf5d6b4615fcb191d317edc1e","sha512":"39bd79f4d93b891529e6dc5e82db6b38317efdf7f3df585ddc68a02551af1231b065adfd2e051c0f35bd23a9cf5587d69d749b8859451388cd4672181283c9ca","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"Byf3DiB7aX.doc","file_path":null,"file_size":1837568,"md5":"47e6db78c27385cdb4abdba0eeb4e013","sha1":"caf4b6f1f8669e4882afae34aaffd5c5777c21ed","sha256":"f796b21c6788f3777514941cba87637200232c6c781095d230083058c1bd84c3","sha512":"fe99e31bfdc47e12e96af46246ac0e20609fe0f76b782ae79ec58e26d1765cd5c98e639e34a5e0263a82a3e096a8455d1fd6bb5fe765c7a30905dd447c4878e4","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"F3ECcNeSSZh2HHk.doc","file_path":null,"file_size":1602048,"md5":"fe633e2c6290b4dd23976f9b9de90efe","sha1":"ae60b9fd5704e0b3bd6e2e7732548b18da2f8886","sha256":"6cbd46a666805d7ae45d65f49699eaca12bd938b83bc34d4b257e83275560b68","sha512":"4e931d32ed7dcbbd414564cfe3572e59728341631dc04a583ff16df3139f684ee12a013d5b68ad14f095df8d4aa1e2984c039e3abd410d8bf5a6ed4fad8293d9","type_tags":["data"],"description":"data","runtime_process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe (PID: 2844)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null}],"file_metadata":{"file_compositions":["1 .OBJ Files (COFF) linked with LINK.EXE 10.10 (Visual Studio 2010) (build: 30319)","1 .EXP Files linked with LINK.EXE 10.00 (Visual Studio 2010) (build: 30319)","23 .ASM Files assembled with MASM 10.00 (Visual Studio 2010) (build: 30319)","43 .CPP Files (with LTCG) compiled with CL.EXE 16.00 (Visual Studio 2010) (build: 30319)","120 .C Files compiled with CL.EXE 16.00 (Visual Studio 2010) (build: 30319)","31 .CPP Files compiled with CL.EXE 16.00 (Visual Studio 2010) (build: 30319)"],"imported_objects":["23 .LIB Files generated with LIB.EXE 9.00 (Visual Studio 2008) (build: 30729)","2 .LIB Files generated with LIB.EXE 7.00 (Visual Studio .NET 2002) (build: 9210)"],"file_analysis":["File contains C++ code","File contains assembly code","File appears to contain raw COFF/OMF content","File was optimized using LTCG and/or POGO","File is the product of a large codebase (217 files)"],"total_file_compositions_imports":239},"processes":[{"uid":"00342209-00002844","parentuid":null,"name":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","normalized_path":"C:\\4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","command_line":null,"sha256":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","av_label":"Gen:Heur.Ransom.Imps","av_matched":51,"av_total":93,"pid":"2844","icon":"$25","process_flags":[{"name":"Multiscan Match","data":"51/93"}]},{"uid":"00346458-00004000","parentuid":"00342209-00002844","name":"cipher.exe","normalized_path":"%WINDIR%\\System32\\cipher.exe","command_line":"/w:Z:","sha256":"aa090b674ad5a39dbb010ce6e3a2b8bb19b084dd32a346742062e3adfa7c3c51","av_label":null,"av_matched":null,"av_total":null,"pid":"4000","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346460-00003128","parentuid":"00342209-00002844","name":"cipher.exe","normalized_path":"%WINDIR%\\System32\\cipher.exe","command_line":"/w:C:","sha256":"aa090b674ad5a39dbb010ce6e3a2b8bb19b084dd32a346742062e3adfa7c3c51","av_label":null,"av_matched":null,"av_total":null,"pid":"3128","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346460-00003088","parentuid":"00342209-00002844","name":"wevtutil.exe","normalized_path":"%WINDIR%\\System32\\wevtutil.exe","command_line":"cl System","sha256":"6d1b7029d64f022392078dd4eb3ba7fd706d02997e96c544db5682cd356a809c","av_label":null,"av_matched":null,"av_total":null,"pid":"3088","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346460-00001476","parentuid":"00342209-00002844","name":"wevtutil.exe","normalized_path":"%WINDIR%\\System32\\wevtutil.exe","command_line":"cl Application","sha256":"6d1b7029d64f022392078dd4eb3ba7fd706d02997e96c544db5682cd356a809c","av_label":null,"av_matched":null,"av_total":null,"pid":"1476","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346461-00002136","parentuid":"00342209-00002844","name":"wbadmin.exe","normalized_path":"%WINDIR%\\System32\\wbadmin.exe","command_line":"delete catalog -quiet","sha256":"be527c6085cd944097de35b9740fc4dd24d455567bec596e9cc300d70c5a392d","av_label":null,"av_matched":null,"av_total":null,"pid":"2136","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346463-00003516","parentuid":"00342209-00002844","name":"bcdedit.exe","normalized_path":"%WINDIR%\\System32\\bcdedit.exe","command_line":"/set {default} bootstatuspolicy ignoreallfailures","sha256":"e5bc427ba84627fa84861c54044df8ac3c3b3c3ed3d007265c6b18f588d0ca8a","av_label":null,"av_matched":null,"av_total":null,"pid":"3516","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346468-00002632","parentuid":"00342209-00002844","name":"bcdedit.exe","normalized_path":"%WINDIR%\\System32\\bcdedit.exe","command_line":"/set {default} recoveryenabled no","sha256":"e5bc427ba84627fa84861c54044df8ac3c3b3c3ed3d007265c6b18f588d0ca8a","av_label":null,"av_matched":null,"av_total":null,"pid":"2632","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346468-00001272","parentuid":"00342209-00002844","name":"wevtutil.exe","normalized_path":"%WINDIR%\\System32\\wevtutil.exe","command_line":"cl Setup","sha256":"6d1b7029d64f022392078dd4eb3ba7fd706d02997e96c544db5682cd356a809c","av_label":null,"av_matched":null,"av_total":null,"pid":"1272","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346476-00000380","parentuid":"00342209-00002844","name":"fsutil.exe","normalized_path":"%WINDIR%\\System32\\fsutil.exe","command_line":"usn deletejournal /D C:","sha256":"c516c131d30436f8170a5a342b576bb82043576bc2be5d1fdc5a19d482016604","av_label":null,"av_matched":null,"av_total":null,"pid":"380","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346477-00002964","parentuid":"00342209-00002844","name":"wevtutil.exe","normalized_path":"%WINDIR%\\System32\\wevtutil.exe","command_line":"sl Security /e:false","sha256":"6d1b7029d64f022392078dd4eb3ba7fd706d02997e96c544db5682cd356a809c","av_label":null,"av_matched":null,"av_total":null,"pid":"2964","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346478-00001100","parentuid":"00342209-00002844","name":"cipher.exe","normalized_path":"%WINDIR%\\System32\\cipher.exe","command_line":"/w:D:","sha256":"aa090b674ad5a39dbb010ce6e3a2b8bb19b084dd32a346742062e3adfa7c3c51","av_label":null,"av_matched":null,"av_total":null,"pid":"1100","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346481-00002908","parentuid":"00342209-00002844","name":"schtasks.exe","normalized_path":"%WINDIR%\\System32\\schtasks.exe","command_line":"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable","sha256":"15018d0093befabba8b927743191030d1f8c17bb97fdb48c2fc3eab20e2d4b3d","av_label":null,"av_matched":null,"av_total":null,"pid":"2908","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00346482-00002820","parentuid":"00342209-00002844","name":"wevtutil.exe","normalized_path":"%WINDIR%\\System32\\wevtutil.exe","command_line":"cl Security","sha256":"6d1b7029d64f022392078dd4eb3ba7fd706d02997e96c544db5682cd356a809c","av_label":null,"av_matched":null,"av_total":null,"pid":"2820","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]}],"mitre_attcks":[{"tactic":"Execution","technique":"Local Job Scheduling","attck_id":"T1168","attck_id_wiki":"https://attack.mitre.org/techniques/T1168","malicious_identifiers_count":1,"malicious_identifiers":["Schedules a task to be executed at a specific time and date"],"suspicious_identifiers_count":1,"suspicious_identifiers":["Loads the task scheduler COM API"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Execution","technique":"Service Execution","attck_id":"T1035","attck_id_wiki":"https://attack.mitre.org/techniques/T1035","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Opened the service control manager"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Persistence","technique":"Local Job Scheduling","attck_id":"T1168","attck_id_wiki":"https://attack.mitre.org/techniques/T1168","malicious_identifiers_count":1,"malicious_identifiers":["Schedules a task to be executed at a specific time and date"],"suspicious_identifiers_count":1,"suspicious_identifiers":["Loads the task scheduler COM API"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attck_id":"T1215","attck_id_wiki":"https://attack.mitre.org/techniques/T1215","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Opens the Kernel Security Device Driver (KsecDD) of Windows"],"parent":null},{"tactic":"Persistence","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/techniques/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Installs hooks/patches the running process"],"parent":null},{"tactic":"Privilege Escalation","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/techniques/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Installs hooks/patches the running process"],"parent":null},{"tactic":"Defense Evasion","technique":"File Deletion","attck_id":"T1107","attck_id_wiki":"https://attack.mitre.org/techniques/T1107","malicious_identifiers_count":2,"malicious_identifiers":["Deletes backup catalog","Deletes USN journal"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Possibly tries to implement anti-virtualization techniques"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Disabling Security Tools","attck_id":"T1089","attck_id_wiki":"https://attack.mitre.org/techniques/T1089","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Makes use of the windows event log utility"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Credential Access","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/techniques/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Installs hooks/patches the running process"],"parent":null},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/techniques/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":4,"suspicious_identifiers":["Monitors specific registry key for changes","Reads the cryptographic machine GUID","Reads information about supported languages"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"Security Software Discovery","attck_id":"T1063","attck_id_wiki":"https://attack.mitre.org/techniques/T1063","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"Process Discovery","attck_id":"T1057","attck_id_wiki":"https://attack.mitre.org/techniques/T1057","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Possibly tries to implement anti-virtualization techniques"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attck_id":"T1120","attck_id_wiki":"https://attack.mitre.org/techniques/T1120","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Queries volume information","Queries volume information of an entire harddrive"],"parent":null},{"tactic":"Collection","technique":"Email Collection","attck_id":"T1114","attck_id_wiki":"https://attack.mitre.org/techniques/T1114","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Found a potential E-Mail address in binary/memory"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-11","type":6,"relevance":2,"name":"Queries volume information","description":"\".exe\" queries volume information of \"C:\\\" at 00342209-00002844-0000010C-4296568410","description_v2":["\".exe\" queries volume information of \"C:\\\" at 00342209-00002844-0000010C-4296568410"],"description_v3":[{"type":"text","value":"\".exe\" queries volume information of \"C:\\\" at 00342209-00002844-0000010C-4296568410"}],"origin":"API Call","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1120","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-39","type":6,"relevance":8,"name":"Queries volume information of an entire harddrive","description":"\".exe\" queries volume information of \"C:\\\" at 00342209-00002844-0000010C-4296568410","description_v2":["\".exe\" queries volume information of \"C:\\\" at 00342209-00002844-0000010C-4296568410"],"description_v3":[{"type":"text","value":"\".exe\" queries volume information of \"C:\\\" at 00342209-00002844-0000010C-4296568410"}],"origin":"API Call","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1120","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"$26","description_v2":["\"\\Sessions\\1\\BaseNamedObjects\\{D95F2E78-F3BE-C23B-D36C-22049F8C33A8}\"","\"\\Sessions\\1\\BaseNamedObjects\\.NET CLR Data_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\.NET CLR Networking_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\.NET CLR Networking 4.0.0.0_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\.NET Data Provider for Oracle_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\.NET Data Provider for SqlServer_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\.NET Memory Cache 4.0_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\.NETFramework_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\ASP.NET_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\ASP.NET_4.0.30319_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\aspnet_state_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\BITS_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\ESENT_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\Lsa_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\MSDTC_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\MSDTC Bridge 3.0.0.0_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\MSDTC Bridge 4.0.0.0_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\MSSCNTRS_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\Outlook_Perf_Library_Lock_PID_b1c\"","\"\\Sessions\\1\\BaseNamedObjects\\PerfDisk_Perf_Library_Lock_PID_b1c\""],"description_v3":[{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\{D95F2E78-F3BE-C23B-D36C-22049F8C33A8}\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\.NET CLR Data_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\.NET CLR Networking_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\.NET CLR Networking 4.0.0.0_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\.NET Data Provider for Oracle_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\.NET Data Provider for SqlServer_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\.NET Memory Cache 4.0_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\.NETFramework_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\ASP.NET_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\ASP.NET_4.0.30319_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\aspnet_state_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\BITS_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\ESENT_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Lsa_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\MSDTC_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\MSDTC Bridge 3.0.0.0_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\MSDTC Bridge 4.0.0.0_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\MSSCNTRS_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Outlook_Perf_Library_Lock_PID_b1c\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\PerfDisk_Perf_Library_Lock_PID_b1c\""}],"origin":"Created Mutant","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-72","type":3,"relevance":3,"name":"Overview of unique CLSIDs touched in registry","description":"\"wbadmin.exe\" touched \"BlbEngine Class\" (Path: \"HKCU\\CLSID\\{37734C4D-FFA8-4139-9AAC-60FBE55BF3DF}\")\n \"wbadmin.exe\" touched \"PSFactoryBuffer\" (Path: \"HKCU\\CLSID\\{E3633C03-DF7A-41E0-B903-CC349A05E021}\")\n \"schtasks.exe\" touched \"TaskScheduler class\" (Path: \"HKCU\\CLSID\\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\")","description_v2":["\"wbadmin.exe\" touched \"BlbEngine Class\" (Path: \"HKCU\\CLSID\\{37734C4D-FFA8-4139-9AAC-60FBE55BF3DF}\")","\"wbadmin.exe\" touched \"PSFactoryBuffer\" (Path: \"HKCU\\CLSID\\{E3633C03-DF7A-41E0-B903-CC349A05E021}\")","\"schtasks.exe\" touched \"TaskScheduler class\" (Path: \"HKCU\\CLSID\\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\")"],"description_v3":[{"type":"text","value":"\"wbadmin.exe\" touched \"BlbEngine Class\" (Path: \"HKCU\\CLSID\\{37734C4D-FFA8-4139-9AAC-60FBE55BF3DF}\")"},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" touched \"PSFactoryBuffer\" (Path: \"HKCU\\CLSID\\{E3633C03-DF7A-41E0-B903-CC349A05E021}\")"},{"type":"linebreak"},{"type":"text","value":"\"schtasks.exe\" touched \"TaskScheduler class\" (Path: \"HKCU\\CLSID\\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"$27","description_v2":["Spawned process \"cipher.exe\" with commandline \"/w:Z:\" (UID: 00346458-00004000)","Spawned process \"cipher.exe\" with commandline \"/w:C:\" (UID: 00346460-00003128)","Spawned process \"wevtutil.exe\" with commandline \"cl System\" (UID: 00346460-00003088)","Spawned process \"wevtutil.exe\" with commandline \"cl Application\" (UID: 00346460-00001476)","Spawned process \"wbadmin.exe\" with commandline \"delete catalog -quiet\" (UID: 00346461-00002136)","Spawned process \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\" (UID: 00346463-00003516)","Spawned process \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\" (UID: 00346468-00002632)","Spawned process \"wevtutil.exe\" with commandline \"cl Setup\" (UID: 00346468-00001272)","Spawned process \"fsutil.exe\" with commandline \"usn deletejournal /D C:\" (UID: 00346476-00000380)","Spawned process \"wevtutil.exe\" with commandline \"sl Security /e:false\" (UID: 00346477-00002964)","Spawned process \"cipher.exe\" with commandline \"/w:D:\" (UID: 00346478-00001100)","Spawned process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\" (UID: 00346481-00002908)","Spawned process \"wevtutil.exe\" with commandline \"cl Security\" (UID: 00346482-00002820)"],"description_v3":[{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:Z:\""},{"type":"process","process_uid":"00346458-00004000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:C:\""},{"type":"process","process_uid":"00346460-00003128","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl System\""},{"type":"process","process_uid":"00346460-00003088","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Application\""},{"type":"process","process_uid":"00346460-00001476","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wbadmin.exe\" with commandline \"delete catalog -quiet\""},{"type":"process","process_uid":"00346461-00002136","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\""},{"type":"process","process_uid":"00346463-00003516","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\""},{"type":"process","process_uid":"00346468-00002632","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Setup\""},{"type":"process","process_uid":"00346468-00001272","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"fsutil.exe\" with commandline \"usn deletejournal /D C:\""},{"type":"process","process_uid":"00346476-00000380","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"sl Security /e:false\""},{"type":"process","process_uid":"00346477-00002964","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:D:\""},{"type":"process","process_uid":"00346478-00001100","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\""},{"type":"process","process_uid":"00346481-00002908","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Security\""},{"type":"process","process_uid":"00346482-00002820","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-103","type":9,"relevance":3,"name":"Spawns new processes that are not known child processes","description":"$28","description_v2":["Spawned process \"cipher.exe\" with commandline \"/w:Z:\" (UID: 00346458-00004000)","Spawned process \"cipher.exe\" with commandline \"/w:C:\" (UID: 00346460-00003128)","Spawned process \"wevtutil.exe\" with commandline \"cl System\" (UID: 00346460-00003088)","Spawned process \"wevtutil.exe\" with commandline \"cl Application\" (UID: 00346460-00001476)","Spawned process \"wbadmin.exe\" with commandline \"delete catalog -quiet\" (UID: 00346461-00002136)","Spawned process \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\" (UID: 00346463-00003516)","Spawned process \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\" (UID: 00346468-00002632)","Spawned process \"wevtutil.exe\" with commandline \"cl Setup\" (UID: 00346468-00001272)","Spawned process \"fsutil.exe\" with commandline \"usn deletejournal /D C:\" (UID: 00346476-00000380)","Spawned process \"wevtutil.exe\" with commandline \"sl Security /e:false\" (UID: 00346477-00002964)","Spawned process \"cipher.exe\" with commandline \"/w:D:\" (UID: 00346478-00001100)","Spawned process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\" (UID: 00346481-00002908)","Spawned process \"wevtutil.exe\" with commandline \"cl Security\" (UID: 00346482-00002820)"],"description_v3":[{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:Z:\""},{"type":"process","process_uid":"00346458-00004000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:C:\""},{"type":"process","process_uid":"00346460-00003128","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl System\""},{"type":"process","process_uid":"00346460-00003088","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Application\""},{"type":"process","process_uid":"00346460-00001476","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wbadmin.exe\" with commandline \"delete catalog -quiet\""},{"type":"process","process_uid":"00346461-00002136","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\""},{"type":"process","process_uid":"00346463-00003516","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\""},{"type":"process","process_uid":"00346468-00002632","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Setup\""},{"type":"process","process_uid":"00346468-00001272","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"fsutil.exe\" with commandline \"usn deletejournal /D C:\""},{"type":"process","process_uid":"00346476-00000380","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"sl Security /e:false\""},{"type":"process","process_uid":"00346477-00002964","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:D:\""},{"type":"process","process_uid":"00346478-00001100","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\""},{"type":"process","process_uid":"00346481-00002908","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Security\""},{"type":"process","process_uid":"00346482-00002820","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-16","type":6,"relevance":1,"name":"Connects to LPC ports","description":"\"wevtutil.exe\" connecting to \"\\ThemeApiPort\"\n \"schtasks.exe\" connecting to \"\\ThemeApiPort\"","description_v2":["\"wevtutil.exe\" connecting to \"\\ThemeApiPort\"","\"schtasks.exe\" connecting to \"\\ThemeApiPort\""],"description_v3":[{"type":"text","value":"\"wevtutil.exe\" connecting to \"\\ThemeApiPort\""},{"type":"linebreak"},{"type":"text","value":"\"schtasks.exe\" connecting to \"\\ThemeApiPort\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"binary-0","type":8,"relevance":3,"name":"Dropped files","description":"\"SrO3gl0EN9SPZi43.doc\" has type \"data\"\n \"dSTEZHvd.doc\" has type \"data\"\n \"OfficeMUISet.msi\" has type \"data\"\n \"h8fg9WRouk.doc\" has type \"data\"\n \"OCXh75SGcr7.doc\" has type \"data\"\n \"dsYny5bq4UJV.doc\" has type \"data\"\n \"TTjDpaUqzIMaB0g.doc\" has type \"data\"\n \"Kty1hE.doc\" has type \"data\"\n \"Ho7euGVfWh.doc\" has type \"data\"\n \"SvUAzGFIQ9qYfc.doc\" has type \"data\"\n \"YfkuO.doc\" has type \"data\"\n \"WordMUI.msi\" has type \"data\"\n \"ShellUI.MST\" has type \"data\"\n \"hgUOm8vUl.doc\" has type \"data\"\n \"THQujKln.doc\" has type \"data\"\n \"Proof.msi\" has type \"data\"\n \"giDj6Q.doc\" has type \"data\"\n \"KQNwhwsYVN.doc\" has type \"data\"\n \"DP001GCJ.doc\" has type \"data\"\n \"gBiUJ4TRATi57.doc\" has type \"data\"","description_v2":["\"SrO3gl0EN9SPZi43.doc\" has type \"data\"","\"dSTEZHvd.doc\" has type \"data\"","\"OfficeMUISet.msi\" has type \"data\"","\"h8fg9WRouk.doc\" has type \"data\"","\"OCXh75SGcr7.doc\" has type \"data\"","\"dsYny5bq4UJV.doc\" has type \"data\"","\"TTjDpaUqzIMaB0g.doc\" has type \"data\"","\"Kty1hE.doc\" has type \"data\"","\"Ho7euGVfWh.doc\" has type \"data\"","\"SvUAzGFIQ9qYfc.doc\" has type \"data\"","\"YfkuO.doc\" has type \"data\"","\"WordMUI.msi\" has type \"data\"","\"ShellUI.MST\" has type \"data\"","\"hgUOm8vUl.doc\" has type \"data\"","\"THQujKln.doc\" has type \"data\"","\"Proof.msi\" has type \"data\"","\"giDj6Q.doc\" has type \"data\"","\"KQNwhwsYVN.doc\" has type \"data\"","\"DP001GCJ.doc\" has type \"data\"","\"gBiUJ4TRATi57.doc\" has type \"data\""],"description_v3":[{"type":"text","value":"\"SrO3gl0EN9SPZi43.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"dSTEZHvd.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"OfficeMUISet.msi\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"h8fg9WRouk.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"OCXh75SGcr7.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"dsYny5bq4UJV.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"TTjDpaUqzIMaB0g.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"Kty1hE.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"Ho7euGVfWh.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"SvUAzGFIQ9qYfc.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"YfkuO.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"WordMUI.msi\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"ShellUI.MST\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"hgUOm8vUl.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"THQujKln.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"Proof.msi\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"giDj6Q.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"KQNwhwsYVN.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"DP001GCJ.doc\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"gBiUJ4TRATi57.doc\" has type \"data\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-51","type":6,"relevance":5,"name":"Opens the MountPointManager (often used to detect additional infection locations)","description":"\"cipher.exe\" opened \"\\Device\\MountPointManager\"\n \"fsutil.exe\" opened \"\\Device\\MountPointManager\"","description_v2":["\"cipher.exe\" opened \"\\Device\\MountPointManager\"","\"fsutil.exe\" opened \"\\Device\\MountPointManager\""],"description_v3":[{"type":"text","value":"\"cipher.exe\" opened \"\\Device\\MountPointManager\""},{"type":"linebreak"},{"type":"text","value":"\"fsutil.exe\" opened \"\\Device\\MountPointManager\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"\".exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"\n \".exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"cipher.exe\" touched file \"%WINDIR%\\System32\\en-US\\cipher.exe.mui\"\n \"cipher.exe\" touched file \"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui\"\n \"cipher.exe\" touched file \"%WINDIR%\\System32\"\n \"wevtutil.exe\" touched file \"%WINDIR%\\System32\\en-US\\wevtutil.exe.mui\"\n \"wevtutil.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"wbadmin.exe\" touched file \"%WINDIR%\\Logs\\WindowsBackup\"\n \"wbadmin.exe\" touched file \"%WINDIR%\\System32\\en-US\\wbadmin.exe.mui\"\n \"wbadmin.exe\" touched file \"%WINDIR%\\Logs\"\n \"wbadmin.exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"\n \"wbadmin.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"bcdedit.exe\" touched file \"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui\"","description_v2":["\".exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"","\".exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","\"cipher.exe\" touched file \"%WINDIR%\\System32\\en-US\\cipher.exe.mui\"","\"cipher.exe\" touched file \"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui\"","\"cipher.exe\" touched file \"%WINDIR%\\System32\"","\"wevtutil.exe\" touched file \"%WINDIR%\\System32\\en-US\\wevtutil.exe.mui\"","\"wevtutil.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","\"wbadmin.exe\" touched file \"%WINDIR%\\Logs\\WindowsBackup\"","\"wbadmin.exe\" touched file \"%WINDIR%\\System32\\en-US\\wbadmin.exe.mui\"","\"wbadmin.exe\" touched file \"%WINDIR%\\Logs\"","\"wbadmin.exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"","\"wbadmin.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","\"bcdedit.exe\" touched file \"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui\""],"description_v3":[{"type":"text","value":"\".exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\""},{"type":"linebreak"},{"type":"text","value":"\".exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"cipher.exe\" touched file \"%WINDIR%\\System32\\en-US\\cipher.exe.mui\""},{"type":"linebreak"},{"type":"text","value":"\"cipher.exe\" touched file \"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"cipher.exe\" touched file \"%WINDIR%\\System32\""},{"type":"linebreak"},{"type":"text","value":"\"wevtutil.exe\" touched file \"%WINDIR%\\System32\\en-US\\wevtutil.exe.mui\""},{"type":"linebreak"},{"type":"text","value":"\"wevtutil.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" touched file \"%WINDIR%\\Logs\\WindowsBackup\""},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" touched file \"%WINDIR%\\System32\\en-US\\wbadmin.exe.mui\""},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" touched file \"%WINDIR%\\Logs\""},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\""},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"bcdedit.exe\" touched file \"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":10,"name":"Found potential URL in binary/memory","description":"Heuristic match: \"ntdetect.com\"\n Heuristic match: \"Mail us: txdot911@protonmail.com\"","description_v2":["Heuristic match: \"ntdetect.com\"","Heuristic match: \"Mail us: txdot911@protonmail.com\""],"description_v3":[{"type":"text","value":"Heuristic match: \"ntdetect.com\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"Mail us: txdot911@protonmail.com\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"api-37","type":6,"relevance":10,"name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\".exe\" opened \"\\Device\\KsecDD\"\n \"cipher.exe\" opened \"\\Device\\KsecDD\"\n \"wbadmin.exe\" opened \"\\Device\\KsecDD\"\n \"wevtutil.exe\" opened \"\\Device\\KsecDD\"\n \"schtasks.exe\" opened \"\\Device\\KsecDD\"","description_v2":["\".exe\" opened \"\\Device\\KsecDD\"","\"cipher.exe\" opened \"\\Device\\KsecDD\"","\"wbadmin.exe\" opened \"\\Device\\KsecDD\"","\"wevtutil.exe\" opened \"\\Device\\KsecDD\"","\"schtasks.exe\" opened \"\\Device\\KsecDD\""],"description_v3":[{"type":"text","value":"\".exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"cipher.exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"wevtutil.exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"schtasks.exe\" opened \"\\Device\\KsecDD\""}],"origin":"API Call","attck_id":"T1215","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1215","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"string-47","type":2,"relevance":7,"name":"Found reference to Diagnosis CAB file","description":"\".ani|.cab|.cpl|.cur|.diagcab|.diagpkg|.dll|.drv|.hlp|.icl|.icns|.ico|.iso|.ics|.lnk|.idx|.mod|.mpa|.msc|.msp|.msstyles|.msu|.nomedia|.ocx|.prf|.rtp|.scr|.shs|.spl|.sys|.theme|.themepack|.exe|.bat|.cmd|.url|.mui\" (Indicator: \".diagcab\")","description_v2":["\".ani|.cab|.cpl|.cur|.diagcab|.diagpkg|.dll|.drv|.hlp|.icl|.icns|.ico|.iso|.ics|.lnk|.idx|.mod|.mpa|.msc|.msp|.msstyles|.msu|.nomedia|.ocx|.prf|.rtp|.scr|.shs|.spl|.sys|.theme|.themepack|.exe|.bat|.cmd|.url|.mui\" (Indicator: \".diagcab\")"],"description_v3":[{"type":"text","value":"\".ani|.cab|.cpl|.cur|.diagcab|.diagpkg|.dll|.drv|.hlp|.icl|.icns|.ico|.iso|.ics|.lnk|.idx|.mod|.mpa|.msc|.msp|.msstyles|.msu|.nomedia|.ocx|.prf|.rtp|.scr|.shs|.spl|.sys|.theme|.themepack|.exe|.bat|.cmd|.url|.mui\" (Indicator: \".diagcab\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"hooks-8","type":11,"relevance":10,"name":"Installs hooks/patches the running process","description":"\"cipher.exe\" wrote bytes \"c04e307720543177e0653177b53832770000000000d0c97500000000c5eac9750000000088eac97500000000e968337582283277ee29327700000000d2693375000000007dbbc9750000000009be337500000000ba18c97500000000\" to virtual address \"0x760F1000\" (part of module \"NSI.DLL\")","description_v2":["\"cipher.exe\" wrote bytes \"c04e307720543177e0653177b53832770000000000d0c97500000000c5eac9750000000088eac97500000000e968337582283277ee29327700000000d2693375000000007dbbc9750000000009be337500000000ba18c97500000000\" to virtual address \"0x760F1000\" (part of module \"NSI.DLL\")"],"description_v3":[{"type":"text","value":"\"cipher.exe\" wrote bytes \"c04e307720543177e0653177b53832770000000000d0c97500000000c5eac9750000000088eac97500000000e968337582283277ee29327700000000d2693375000000007dbbc9750000000009be337500000000ba18c97500000000\" to virtual address \"0x760F1000\" (part of module \"NSI.DLL\")"}],"origin":"Hook Detection","attck_id":"T1179","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1179","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"string-1","type":2,"relevance":4,"name":"Possibly tries to implement anti-virtualization techniques","description":"\"vmware-vmx.\" (Indicator: \"vmware\")","description_v2":["\"vmware-vmx.\" (Indicator: \"vmware\")"],"description_v3":[{"type":"text","value":"\"vmware-vmx.\" (Indicator: \"vmware\")"}],"origin":"File/Memory","attck_id":"T1497","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-1","type":3,"relevance":10,"name":"Reads the cryptographic machine GUID","description":"\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"wbadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","description_v2":["\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","\"wbadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"],"description_v3":[{"type":"text","value":"\".exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"External Systems","identifier":"avtest-6","type":12,"relevance":10,"name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/79 reputation engines marked \"http://ntdetect.com\" as malicious (1% detection rate)","description_v2":["1/79 reputation engines marked \"http://ntdetect.com\" as malicious (1% detection rate)"],"description_v3":[{"type":"text","value":"1/79 reputation engines marked \"http://ntdetect.com\" as malicious (1% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"string-63","type":2,"relevance":3,"name":"Found a potential E-Mail address in binary/memory","description":"Pattern match: \"txdot911@protonmail.com\"","description_v2":["Pattern match: \"txdot911@protonmail.com\""],"description_v3":[{"type":"text","value":"Pattern match: \"txdot911@protonmail.com\""}],"origin":"File/Memory","attck_id":"T1114","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1114","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-77","type":6,"relevance":10,"name":"Opened the service control manager","description":"\".exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_ALL_ACCESS\" (0xf003f)","description_v2":["\".exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_ALL_ACCESS\" (0xf003f)"],"description_v3":[{"type":"text","value":"\".exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_ALL_ACCESS\" (0xf003f)"}],"origin":"API Call","attck_id":"T1035","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1035","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"module-4","type":10,"relevance":5,"name":"Loads the task scheduler COM API","description":"\"schtasks.exe\" loaded module \"%WINDIR%\\System32\\taskschd.dll\" at 73780000","description_v2":["\"schtasks.exe\" loaded module \"%WINDIR%\\System32\\taskschd.dll\" at 73780000"],"description_v3":[{"type":"text","value":"\"schtasks.exe\" loaded module \"%WINDIR%\\System32\\taskschd.dll\" at 73780000"}],"origin":"Loaded Module","attck_id":"T1168","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1168","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"api-12","type":6,"relevance":4,"name":"Monitors specific registry key for changes","description":"\".exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 0)","description_v2":["\".exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 0)"],"description_v3":[{"type":"text","value":"\".exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 0)"}],"origin":"API Call","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Ransomware/Banking","identifier":"string-13","type":2,"relevance":7,"name":"Detected indicator that file is ransomware","description":"\"cryptolocker\" (Source: 4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin, Indicator: \"cryptolocker\")","description_v2":["\"cryptolocker\" (Source: 4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin, Indicator: \"cryptolocker\")"],"description_v3":[{"type":"text","value":"\"cryptolocker\" (Source: 4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin, Indicator: \"cryptolocker\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"api-25","type":6,"relevance":7,"name":"Opens file with deletion access rights","description":"$29","description_v2":["\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.msi\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.msi\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.msi\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.msi\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.msi\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.msi\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\pss10r.chm\" with delete access","\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\setup.chm\" with delete access"],"description_v3":[{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0016-0409-0000-0000000FF1CE}-C\\ExcelMUI.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0016-0409-0000-0000000FF1CE}-C\\Setup.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0018-0409-0000-0000000FF1CE}-C\\PowerPointMUI.msi\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0018-0409-0000-0000000FF1CE}-C\\Setup.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0019-0409-0000-0000000FF1CE}-C\\PublisherMUI.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0019-0409-0000-0000000FF1CE}-C\\Setup.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-001A-0409-0000-0000000FF1CE}-C\\OutlookMUI.msi\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-001B-0409-0000-0000000FF1CE}-C\\WordMUI.msi\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\Proof.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\Proof.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\Proof.msi\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proofing.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Setup.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.xml\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\OneNoteMUI.msi\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\OfficeMUI.msi\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\pss10r.chm\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\".exe\" opened \"C:\\MSOCache\\All Users\\{90140000-0115-0409-0000-0000000FF1CE}-C\\setup.chm\" with delete access"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Security","identifier":"target-76","type":9,"relevance":10,"name":"Makes use of the windows event log utility","description":"Process \"wevtutil.exe\" with commandline \"cl System\" (UID: 00346460-00003088)\n Process \"wevtutil.exe\" with commandline \"cl Application\" (UID: 00346460-00001476)\n Process \"wevtutil.exe\" with commandline \"cl Setup\" (UID: 00346468-00001272)\n Process \"wevtutil.exe\" with commandline \"sl Security /e:false\" (UID: 00346477-00002964)\n Process \"wevtutil.exe\" with commandline \"cl Security\" (UID: 00346482-00002820)","description_v2":["Process \"wevtutil.exe\" with commandline \"cl System\" (UID: 00346460-00003088)","Process \"wevtutil.exe\" with commandline \"cl Application\" (UID: 00346460-00001476)","Process \"wevtutil.exe\" with commandline \"cl Setup\" (UID: 00346468-00001272)","Process \"wevtutil.exe\" with commandline \"sl Security /e:false\" (UID: 00346477-00002964)","Process \"wevtutil.exe\" with commandline \"cl Security\" (UID: 00346482-00002820)"],"description_v3":[{"type":"text","value":"Process \"wevtutil.exe\" with commandline \"cl System\""},{"type":"process","process_uid":"00346460-00003088","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"wevtutil.exe\" with commandline \"cl Application\""},{"type":"process","process_uid":"00346460-00001476","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"wevtutil.exe\" with commandline \"cl Setup\""},{"type":"process","process_uid":"00346468-00001272","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"wevtutil.exe\" with commandline \"sl Security /e:false\""},{"type":"process","process_uid":"00346477-00002964","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"wevtutil.exe\" with commandline \"cl Security\""},{"type":"process","process_uid":"00346482-00002820","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1089","capec_id":"CAPEC-578","attck_id_wiki":"https://attack.mitre.org/techniques/T1089","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-0","type":0,"relevance":10,"name":"CRC value set in PE header does not match actual value","description":"\"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin\" claimed CRC 207928 while the actual is CRC 174914","description_v2":["\"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin\" claimed CRC 207928 while the actual is CRC 174914"],"description_v3":[{"type":"text","value":"\"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin\" claimed CRC 207928 while the actual is CRC 174914"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-1","type":0,"relevance":1,"name":"Imports suspicious APIs","description":"OpenProcessToken\n SetKernelObjectSecurity\n GetUserNameA\n FindNextFileA\n WriteFile\n GetModuleFileNameW\n IsDebuggerPresent\n GetModuleFileNameA\n UnhandledExceptionFilter\n GetModuleHandleA\n CreateThread\n TerminateProcess\n CreateToolhelp32Snapshot\n OpenProcess\n LoadLibraryW\n GetVersionExW\n GetTickCount\n DeleteFileA\n Process32Next\n Process32First\n GetProcAddress\n GetFileSizeEx\n FindNextFileW\n GetComputerNameA\n FindFirstFileW\n CreateFileW\n Process32NextW\n Process32FirstW\n FindFirstFileA\n GetModuleHandleW\n Sleep\n GetModuleFileNameExW\n ShellExecuteExW\n ZwQueryInformationProcess","description_v2":["OpenProcessToken","SetKernelObjectSecurity","GetUserNameA","FindNextFileA","WriteFile","GetModuleFileNameW","IsDebuggerPresent","GetModuleFileNameA","UnhandledExceptionFilter","GetModuleHandleA","CreateThread","TerminateProcess","CreateToolhelp32Snapshot","OpenProcess","LoadLibraryW","GetVersionExW","GetTickCount","DeleteFileA","Process32Next","Process32First","GetProcAddress","GetFileSizeEx","FindNextFileW","GetComputerNameA","FindFirstFileW","CreateFileW","Process32NextW","Process32FirstW","FindFirstFileA","GetModuleHandleW","Sleep","GetModuleFileNameExW","ShellExecuteExW","ZwQueryInformationProcess"],"description_v3":[{"type":"text","value":"OpenProcessToken"},{"type":"linebreak"},{"type":"text","value":"SetKernelObjectSecurity"},{"type":"linebreak"},{"type":"text","value":"GetUserNameA"},{"type":"linebreak"},{"type":"text","value":"FindNextFileA"},{"type":"linebreak"},{"type":"text","value":"WriteFile"},{"type":"linebreak"},{"type":"text","value":"GetModuleFileNameW"},{"type":"linebreak"},{"type":"text","value":"IsDebuggerPresent"},{"type":"linebreak"},{"type":"text","value":"GetModuleFileNameA"},{"type":"linebreak"},{"type":"text","value":"UnhandledExceptionFilter"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleA"},{"type":"linebreak"},{"type":"text","value":"CreateThread"},{"type":"linebreak"},{"type":"text","value":"TerminateProcess"},{"type":"linebreak"},{"type":"text","value":"CreateToolhelp32Snapshot"},{"type":"linebreak"},{"type":"text","value":"OpenProcess"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryW"},{"type":"linebreak"},{"type":"text","value":"GetVersionExW"},{"type":"linebreak"},{"type":"text","value":"GetTickCount"},{"type":"linebreak"},{"type":"text","value":"DeleteFileA"},{"type":"linebreak"},{"type":"text","value":"Process32Next"},{"type":"linebreak"},{"type":"text","value":"Process32First"},{"type":"linebreak"},{"type":"text","value":"GetProcAddress"},{"type":"linebreak"},{"type":"text","value":"GetFileSizeEx"},{"type":"linebreak"},{"type":"text","value":"FindNextFileW"},{"type":"linebreak"},{"type":"text","value":"GetComputerNameA"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileW"},{"type":"linebreak"},{"type":"text","value":"CreateFileW"},{"type":"linebreak"},{"type":"text","value":"Process32NextW"},{"type":"linebreak"},{"type":"text","value":"Process32FirstW"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileA"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleW"},{"type":"linebreak"},{"type":"text","value":"Sleep"},{"type":"linebreak"},{"type":"text","value":"GetModuleFileNameExW"},{"type":"linebreak"},{"type":"text","value":"ShellExecuteExW"},{"type":"linebreak"},{"type":"text","value":"ZwQueryInformationProcess"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"registry-25","type":3,"relevance":3,"name":"Reads information about supported languages","description":"\"wevtutil.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"wbadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"bcdedit.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"fsutil.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","description_v2":["\"wevtutil.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","\"wbadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","\"bcdedit.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","\"fsutil.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"],"description_v3":[{"type":"text","value":"\"wevtutil.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"},{"type":"linebreak"},{"type":"text","value":"\"wbadmin.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"},{"type":"linebreak"},{"type":"text","value":"\"bcdedit.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"},{"type":"linebreak"},{"type":"text","value":"\"fsutil.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-3","type":0,"relevance":10,"name":"Timestamp in PE header is very old or in the future","description":"\"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin\" claims program is from Thu Jan 1 00:00:00 1970","description_v2":["\"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin\" claims program is from Thu Jan 1 00:00:00 1970"],"description_v3":[{"type":"text","value":"\"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin\" claims program is from Thu Jan 1 00:00:00 1970"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Anti-Detection/Stealthyness","identifier":"target-6","type":9,"relevance":8,"name":"Tries to suppress failures during boot (often used to hide system changes)","description":"Tries to suppress failures during boot \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\" (UID: 00346463-00003516)","description_v2":["Tries to suppress failures during boot \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\" (UID: 00346463-00003516)"],"description_v3":[{"type":"text","value":"Tries to suppress failures during boot \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\""},{"type":"process","process_uid":"00346463-00003516","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-3","type":12,"relevance":10,"name":"Sample was identified as malicious by a large number of Antivirus engines","description":"55/72 Antivirus vendors marked sample as malicious (76% detection rate)","description_v2":["55/72 Antivirus vendors marked sample as malicious (76% detection rate)"],"description_v3":[{"type":"text","value":"55/72 Antivirus vendors marked sample as malicious (76% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-0","type":12,"relevance":8,"name":"Sample was identified as malicious by at least one Antivirus engine","description":"55/72 Antivirus vendors marked sample as malicious (76% detection rate)\n 8/37 Antivirus vendors marked sample as malicious (21% detection rate)","description_v2":["55/72 Antivirus vendors marked sample as malicious (76% detection rate)","8/37 Antivirus vendors marked sample as malicious (21% detection rate)"],"description_v3":[{"type":"text","value":"55/72 Antivirus vendors marked sample as malicious (76% detection rate)"},{"type":"linebreak"},{"type":"text","value":"8/37 Antivirus vendors marked sample as malicious (21% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistance","identifier":"target-5","type":9,"relevance":8,"name":"Disables startup repair","description":"Disables startup repair \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\" (UID: 00346468-00002632)","description_v2":["Disables startup repair \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\" (UID: 00346468-00002632)"],"description_v3":[{"type":"text","value":"Disables startup repair \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\""},{"type":"process","process_uid":"00346468-00002632","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistance","identifier":"target-13","type":9,"relevance":8,"name":"Schedules a task to be executed at a specific time and date","description":"Process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\" (UID: 00346481-00002908)","description_v2":["Process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\" (UID: 00346481-00002908)"],"description_v3":[{"type":"text","value":"Process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\""},{"type":"process","process_uid":"00346481-00002908","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1168","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1168","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Ransomware/Banking","identifier":"target-81","type":9,"relevance":10,"name":"Deletes USN journal","description":"Deletes USN journal using \"fsutil.exe\" with commandline \"usn deletejournal /D C:\" (UID: 00346476-00000380)","description_v2":["Deletes USN journal using \"fsutil.exe\" with commandline \"usn deletejournal /D C:\" (UID: 00346476-00000380)"],"description_v3":[{"type":"text","value":"Deletes USN journal using \"fsutil.exe\" with commandline \"usn deletejournal /D C:\""},{"type":"process","process_uid":"00346476-00000380","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1107","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1107","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Ransomware/Banking","identifier":"target-80","type":9,"relevance":10,"name":"Deletes backup catalog","description":"Deletes backup catalog files using \"wbadmin.exe\" with commandline \"delete catalog -quiet\" (UID: 00346461-00002136)","description_v2":["Deletes backup catalog files using \"wbadmin.exe\" with commandline \"delete catalog -quiet\" (UID: 00346461-00002136)"],"description_v3":[{"type":"text","value":"Deletes backup catalog files using \"wbadmin.exe\" with commandline \"delete catalog -quiet\""},{"type":"process","process_uid":"00346461-00002136","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1107","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1107","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"System Destruction","identifier":"target-81","type":9,"relevance":10,"name":"Deletes USN journal","description":"Deletes USN journal using \"fsutil.exe\" with commandline \"usn deletejournal /D C:\" (UID: 00346476-00000380)","description_v2":["Deletes USN journal using \"fsutil.exe\" with commandline \"usn deletejournal /D C:\" (UID: 00346476-00000380)"],"description_v3":[{"type":"text","value":"Deletes USN journal using \"fsutil.exe\" with commandline \"usn deletejournal /D C:\""},{"type":"process","process_uid":"00346476-00000380","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1107","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1107","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"System Destruction","identifier":"target-80","type":9,"relevance":10,"name":"Deletes backup catalog","description":"Deletes backup catalog files using \"wbadmin.exe\" with commandline \"delete catalog -quiet\" (UID: 00346461-00002136)","description_v2":["Deletes backup catalog files using \"wbadmin.exe\" with commandline \"delete catalog -quiet\" (UID: 00346461-00002136)"],"description_v3":[{"type":"text","value":"Deletes backup catalog files using \"wbadmin.exe\" with commandline \"delete catalog -quiet\""},{"type":"process","process_uid":"00346461-00002136","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1107","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1107","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"string-0","type":2,"relevance":9,"name":"References BIOS/BOOT related strings","description":"\"ntdetect.com\"","description_v2":["\"ntdetect.com\""],"description_v3":[{"type":"text","value":"\"ntdetect.com\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"target-14","type":9,"relevance":8,"name":"Spawns a lot of processes","description":"$2a","description_v2":["Spawned process \".exe\" (UID: 00342209-00002844)","Spawned process \"cipher.exe\" with commandline \"/w:Z:\" (UID: 00346458-00004000)","Spawned process \"cipher.exe\" with commandline \"/w:C:\" (UID: 00346460-00003128)","Spawned process \"wevtutil.exe\" with commandline \"cl System\" (UID: 00346460-00003088)","Spawned process \"wevtutil.exe\" with commandline \"cl Application\" (UID: 00346460-00001476)","Spawned process \"wbadmin.exe\" with commandline \"delete catalog -quiet\" (UID: 00346461-00002136)","Spawned process \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\" (UID: 00346463-00003516)","Spawned process \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\" (UID: 00346468-00002632)","Spawned process \"wevtutil.exe\" with commandline \"cl Setup\" (UID: 00346468-00001272)","Spawned process \"fsutil.exe\" with commandline \"usn deletejournal /D C:\" (UID: 00346476-00000380)","Spawned process \"wevtutil.exe\" with commandline \"sl Security /e:false\" (UID: 00346477-00002964)","Spawned process \"cipher.exe\" with commandline \"/w:D:\" (UID: 00346478-00001100)","Spawned process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\" (UID: 00346481-00002908)","Spawned process \"wevtutil.exe\" with commandline \"cl Security\" (UID: 00346482-00002820)"],"description_v3":[{"type":"text","value":"Spawned process \".exe\""},{"type":"process","process_uid":"00342209-00002844","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:Z:\""},{"type":"process","process_uid":"00346458-00004000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:C:\""},{"type":"process","process_uid":"00346460-00003128","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl System\""},{"type":"process","process_uid":"00346460-00003088","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Application\""},{"type":"process","process_uid":"00346460-00001476","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wbadmin.exe\" with commandline \"delete catalog -quiet\""},{"type":"process","process_uid":"00346461-00002136","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"/set {default} bootstatuspolicy ignoreallfailures\""},{"type":"process","process_uid":"00346463-00003516","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"/set {default} recoveryenabled no\""},{"type":"process","process_uid":"00346468-00002632","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Setup\""},{"type":"process","process_uid":"00346468-00001272","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"fsutil.exe\" with commandline \"usn deletejournal /D C:\""},{"type":"process","process_uid":"00346476-00000380","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"sl Security /e:false\""},{"type":"process","process_uid":"00346477-00002964","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cipher.exe\" with commandline \"/w:D:\""},{"type":"process","process_uid":"00346478-00001100","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"schtasks.exe\" with commandline \"/Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\""},{"type":"process","process_uid":"00346481-00002908","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"wevtutil.exe\" with commandline \"cl Security\""},{"type":"process","process_uid":"00346482-00002820","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null}],"detonation_parameters":{"action_script":"default_maxantievasion","experimental_anti_evasion":true,"script_logging":true,"allow_sample_tampering":false,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":150,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default_maxantievasion.au3","monitor_script_description":"Heavy Anti-Evasion","windows_version_name":"Windows 7","windows_version_edition":"Professional","windows_version_service_pack":"Service Pack 1","windows_version_version":"6.1 (build 7601)","windows_version_bitness":"32","custom_date_time":null,"sandbox_version":"8.31","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Ransomware","details":["Detected indicator that file is ransomware"]},{"name":"Persistence","details":["Schedules a task to be executed at a specific time and date","Spawns a lot of processes","Disables startup repair","Tries to suppress failures during boot (often used to hide system changes)"]},{"name":"Fingerprint","details":["Queries kernel debugger information","Queries process information","Found a dropped file containing the Windows username (possible fingerprint attempt)","Reads the cryptographic machine GUID","Reads the active computer name"]},{"name":"Evasive","details":["Possibly tries to implement anti-virtualization techniques","Possibly checks for the presence of an Antivirus engine"]}],"icon":"$2b","visualization":"$2c","classification":["41.0% (.EXE) Win32 Executable MS Visual C++ (generic)","36.3% (.EXE) Win64 Executable (generic)","8.6% (.DLL) Win32 Dynamic Link Library (generic)","5.9% (.EXE) Win32 Executable (generic)","2.6% (.EXE) OS/2 Executable (generic)"],"dns_requests":[],"contacted_hosts":[],"contacted_countries":{"countries":[],"coordinates":[]},"port_infos":[],"extracted_strings":{"all":[{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5eltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlae3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ITAqMDYwUDBaMGAwbDByMHsw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ITAzMDswQTBZMF8wZjByMHgw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRYRE9UX1JFQURfTUUhLnR4dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiIiIiIiIiIiIiIiIiIiIg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"I3wkKCNcJCwz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"KCgoKCggICAgICAgICAgICAgICAgICBI","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"LmFuaXwuY2FifC5jcGx8LmN1cnwuZGlhZ2NhYnwuZGlhZ3BrZ3wuZGxsfC5kcnZ8LmhscHwuaWNsfC5pY25zfC5pY298Lmlzb3wuaWNzfC5sbmt8LmlkeHwubW9kfC5tcGF8Lm1zY3wubXNwfC5tc3N0eWxlc3wubXN1fC5ub21lZGlhfC5vY3h8LnByZnwucnRwfC5zY3J8LnNoc3wuc3BsfC5zeXN8LnRoZW1lfC50aGVtZXBhY2t8LmV4ZXwuYmF0fC5jbWR8LnVybHwubXVp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0NoYW5nZSAvVE4gIlxNaWNyb3NvZnRcV2luZG93c1xTeXN0ZW1SZXN0b3JlXFNSIiAvZGlzYWJsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"L3NldCB7ZGVmYXVsdH0gYm9vdHN0YXR1c3BvbGljeSBpZ25vcmVhbGxmYWlsdXJlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"L3NldCB7ZGVmYXVsdH0gcmVjb3ZlcnllbmFibGVkIG5v","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MCAwJDAoMCwwMDA0MDgwPDBAMEQwSDBMMFAwVDBYMFwwYDBkMGgwbDBwMHQweDB8MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDwwSDBTMF4wbTB5MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxMDE0MTgxPDFAMUQxSDFMMVAxVDFYMVwxYDFkMWgxbDFwMXQxeDF8MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMTAxNDE4MTwxQDFEMUgxTDFQMVQxWDFcMWAxZDFoMWwxcDF0MXgxfDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSMxKTEzMTkxPjFDMUgxTTFTMVgxXTFiMWcxbTF0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSQxLDE0MTwxRDFMMVQxXDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MScxNzFVMV0xZjFtMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MUMxSTFzMXkx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MUoyWTJpMnky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiAyJDIoMiwyMDI0MjgyPDJAMkQySDJMMlAyVDJYMlwyYDJkMmgybDJwMnQyeDJ8Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiMyKTIwMjwyQjJJMlUyWzJiMnEydzJ+Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiUyLTI5MkUyVzJpMnsy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MikyMzI9MkcyVzJ1Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MikyTzJtMnQyeDJ8Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiszSzM7NGQ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjAyOzJDMlMyWTJqMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjAzNzNHM1czYjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjEyQzJVMmcyeTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjIyOjJmMmwy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Mj0zQjNJM1AzZDN9Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MkMyUjJsMnMyfjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MyAzJDMoMywzMDM0MzgzPDNAM0QzSDNMM1AzVDNYM1wzYDNkM2gzbDNwM3QzeDN8Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MyUzNzM/M0UzXTNjM2ozdjN8Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Myo0OTRJNFk0ZDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MyszODNDM0kzUzNZM14zYzNoM20zczN4M30z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkLCN8JDgjXCQ8Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkNCN8JEAjXCREMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkPCN8JEgjXCRMMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkTCN8JFAjXCRUMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkVCN8JCAjXCQkMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0MDQ0NDg0PDRANEQ0SDRMNFA0VDRYNFw0YDRkNGg0bDRwNHQ0eDR8NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0djR8NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCQ0KDQsNDA0ODQ8NEA0RDRMNFA0VDRYNGA0ZDRoNGw0dDR4NHw0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCU0MjRJNGA0cTQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCk0VjRcNHo0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NDE1PjVbNWU1azVxNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NEg1TjVUNVo1YDVmNW01dDV7NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NEw1UDVWNVo1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSA1JDUoNSw1MDU0NTg1PDVANUQ1SDVMNVA1VDVYNVw1YDVoNWw1cDV0NXg1fDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSA1KDUsNTA1NDU8NUA1RDVINVA1VDVYNVw1ZDVoNWw1cDV4NXw1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSE1JzUuNT01QzVKNVY1XzV5NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSE1STVXNWQ1dDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSE3NDdZN3Y3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSc1NDU5NUc1IjZFNlA2czY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NS41NTVBNXE1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NiA2JDYoNiw2MDY0Njg2PDZANkQ2SDZMNlA2VDZYNlw2YDZkNmg2bDZwNnQ2eDZ8Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NiA2KDYsNjA2ODY8NkA2SDZMNlA2WDZcNmA2aDZsNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NiQ2LDZINn42","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NyA3JDcoNyw3MDc0Nzg3PDdAN0Q3SDdMN1A3VDdYN1w3YDdkN2g3bDdwN3Q3eDd8Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NyI3OTdLN2Y3czc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NyM3LjczNzw3RjdRNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Nyg3MDc0N0A3SDdMN1g3YDdkN3A3eDd8Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ny43PTdPN1Y3YjdyNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NzE3PjdKN1Q3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Nzg3PjdIN1c3XTdkN3A3djd9Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCA4JDgoOCw4MDg0ODg4PDhAOEQ4SDhMOFA4VDhYOHA6dDp4Onw6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCA4KDgsODQ4PDhAOEg4UDhUOFw4ZDhoOHA4eDh8OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCU4Ljg3OEA4SThSOFs4eDl8OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCg4RThUOG04","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCk4Ljg8OFc4XDh+OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCk4NzhHOE04ZDhqOHE4fTg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OC84PDhCOFw4czg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ODE4QThUOGM4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ODkqOTA5QDlNOWU5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ODk5SjlrOXo5QT5QPmk+ez4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSA6KDosOjQ6PDpAOkg6UDpUOlw6ZDpoOnA6eDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSM5LTk3OUE5SzlVOV85aTlzOX05","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSQ5LDkwOVg5YDlkOWw5dDl4OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSs6OjpVOlw6eTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OUg5TzlZOWA5ZzluOXU5fDk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OVk5YDltOXM5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OiA6LzpFOlI6ajp0Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OiE6KDo0Ojo6QTpQOlY6XTpsOnI6eTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oic6MTo7OkU6TzpZOmM6bTp3Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oic6WzpmOnA6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oi06NDo4Ojw6QDpEOkg6TDpQOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ojw6QjpIOl06ajpyOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlwkcmVjeWNsZS5iaW5c","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Olxkcml2ZXJzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlxlZnN0bXB3cFw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlxwZXJmbG9nc1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Olxwcm9ncmFtZGF0YVw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Olx3aW5kb3dzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyA7JDsoOyw7MDs0Ozg7PDtAO0Q7SDtMO1A7VDtYO1w7YDtkO2g7bDtwO3Q7eDt8Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyA7LjtDO007czs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyE7Kzs1Oz87STtTO107ZztxO3s7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyE7Njs/O0o7TztzOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyM7ODs2P0U/XT8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyY7ODtYO2w7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oyo7Lzs1Oz07SDtkOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OzY8PDxAPEQ8SDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ozg7PztEO0g7TDttOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"O0x1L2V4bWEv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCA8JDwoPCw8MDw0PDg8PDxAPEQ8SDxMPFA8VDxYPFw8YDxkPGg8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCI9Lj1BPVM9bj12PX49","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCM9KT0xPXg9fT0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCQ8MzxSPFc8bjw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCU8Lzw5PEM8TTxXPGE8azx1PA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC49QT1ZPXk9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PEE8STxePGk8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHByb2dyYW0gbmFtZSB1bmtub3duPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSA9JD0oPSw9MD00PTg9PD1APUQ9SD1MPVA9VD1YPVw9YD1kPWg9bD1wPXQ9eD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSI9RD1TPX49","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSg9Lz1YPWk9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSk9Mz09PUc9UT1bPWU9bz15PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSw9OD08PUA9RD1IPUw9UD1UPVg9XD1gPWQ9aD1sPXA9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiA+JD4oPiw+MD40Pjg+PD5APkg+TD5QPlQ+WD5cPmA+ZD5oPmw+cD50Png+fD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiI+Mj44PkI+Rz5NPl0+cD55Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiM+LT43PkE+Sz5VPl8+aT5zPn0+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiQ+MD40Pjg+PD5APkQ+SD5MPlQ+YD5kPmg+bD5wPnQ+eD58Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PyA/JD8oPyw/MD80Pzg/PD9AP0Q/SD9MP1A/VD9YP1w/YD9kP2g/bD9wP3Q/eD98Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PyY/Lz9DP00/ZT9zP3k/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Pyc/MT87P0U/Tz9ZP2A/Zz9uP3U/fD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"P19fOz8sX19fZ3FfLDks","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"P1JlZmxlY3RpdmVMb2FkZXJAQFlHS1BBWEBa","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"P8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XGFsbCB1c2Vyc1xtaWNyb3NvZnRc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFcbG9jYWxc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFcbG9jYWxsb3dc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFccm9hbWluZ1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGluZXRwdWJcbG9nc1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDM3Qy0tMTI2MjA5MDQ4NS00ODI3NjUxMjkzNzI0MjE4NjUtMTkyOTE2MjkxMTEyMjUwMjU4OTgxMzk0NjY1MjI3Mjg3NTQ5MjA1LTUwOTA1NjExMA==","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDM4NC0tNzY4MDU0ODgyMTAwMDQ5MjQzNC0xMTIxNzI2MzIzLTE4MTE2NTIzNzItMTUzMjIyNjc3MC00OTgzNDQwMjkxNDc1MDQ0NDU1LTIwNzI4NjYxNDA=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDREOC01OTk0NzM2Mzg2NjY0NTAwOTYxNTEzMTgzMjExLTEyMDMyNzYyNjUxMTcwNzczNDU4ODg1MDUyMDI5MjA2MDYwNTcwMDEwMTY2NTc2OTQ=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDU5Qy0xMzQ1NDM5MzUxLTE1Nzg4NTI1NTUtODg1OTE0MzE4LTE2ODcxODE1NDAxNTkwNTc3MDIzODU4MjYzODEzLTQ0NDQwOTY4MDY0NjkwOTg=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDVBMC0tMTM2NzgxNTY1NC04MTI0NjY3OTctMTk4MDg0NTAzOC00MjQyNjc1NTY1MzI2NDIzMDQtMTg2MzQ4NDUxMC0xNjY3MDc3Nzk0LTIwODk1MDA1NDk=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDg2Qy0tMjA3NTUyOTY4MS0xNzY0OTQ4NDI3NTEyNTY2OTE5LTE2MjY3OTUxNTItMjA3OTQ0MjA5MC0xMTUyODU2OTczLTE4NTM2MDMwNjUtMTY3MjYxNjA3NQ==","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDlEMC0yNTUxMzQ3NTUtOTgyNDQ0NTktMTUwNzkxMTc5Ny0xMjQ5NDQwMzQwOTEwOTYyOTkzLTE3MTUzOTUwOTUtMTIwMTIzMjA4ODE2MzA2MjY1MTM=","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEEzNC0zNDM1Nzc2MTUxODA2NDEyODMtMTI5NzM4NTQ5Ny04MzMxNjk2OTAzOTE3MDk5ODkxOTU4NjcwODgtMTg1NjY5NzcxOTI4NzA3MjM4NQ==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEE0NC0xNTQ4NDYzNTg0LTU3Mzg4MDk1NjE1OTczMDk1MTEzMzYzMDY1NjctMTgyNzg5MTg5OTg4ODA0MjA4Ni0xNjMzOTgwMjkwMTYwNDE2Njk1Nw==","type":"Unicode","source":"Runtime Data","process":"fsutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEE3Qy0tNDU2NTczNDE4LTIwNDA3NzcxMzktMTMyOTYzNTExNi0xNjUyNDM4NjE1MjEyNjc2MTA4MjkzNTY5NTk0Mjc3MjU3MTYzNy0xMjY1NjM2Njgy","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEIxMC00MjI2NTIyNjY2NDU4NzYwMTIxOTUzNTMxMjYyLTE2Mjk2MjcwODQ0OTMzNzgyODcxOTMwNDAzMDIzLTk1NTUzOTA1NDU4NzQyODU2Mg==","type":"Unicode","source":"Runtime Data","process":"schtasks.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEQ1OC0tNDQ2MTMzOTA4MTUzMzgxNTM0OTI1Mzg3NTE3MjExMTI4ODc4MDUzOTE5MDEyMjI2ODY3MTA2MzIyMjY0MDY0NTgtMTA5NjE0MjMxOA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEY3OC0tMTYwOTA5NjgzNy00NTE2NzYxNDktODc5Nzg2MjkxNzMxMDU4MDk4LTEzNDYxNjg0MzM2MzUwOTU1ODc1OTQzODc1Mi03OTQ1NjY3NjU=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEZDQy0tMTU5MTgxNjM4Ny0xNTgwNjA2ODA3LTE0OTc5NzY3NDYxNDkwNDc5MzMzMzI3Njk3OTI3LTE4MjIzNzE4MzYxNzIxMDQxNzc0LTE2MDQ0MDU1NjI=","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzdGVtMzJc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzdGVtXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzd293NjRc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncd2luc3hzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Xz9fXz9fP3Y/X19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGJjZGVjZGVmZGVmZ2VmZ2hmZ2hpZ2hpamhpamtpamtsamtsbWtsbW5sbW5vbW5vcG5vcHE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hiY2RlZmdoaWNkZWZnaGlqZGVmZ2hpamtlZmdoaWprbGZnaGlqa2xtZ2hpamtsbW5oaWprbG1ub2lqa2xtbm9wamtsbW5vcHFrbG1ub3Bxcmxtbm9wcXJzbW5vcHFyc3Rub3BxcnN0dQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ejAxMjM0NTY3ODk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25pcyBWU1MgUHJvdmlkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25pc0FnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25peEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyU2NoMlN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWdudHN2Yy5hZ250c3ZjLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWdudHN2Yy5lbmNzdmMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QU1pY3Jvc29mdCBWaXN1YWwgQysrIFJ1bnRpbWUgTGlicmFyeQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW50aXZpcnVz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXV0b3J1bi5pbmY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QWNjZWxlcmF0b3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QnJvd3Nlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0RldmljZU1lZGlhU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0pvYkVuZ2luZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY01hbmFnZW1lbnRTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1JQQ1NlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1ZTU1Byb3ZpZGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFzaWMgQ29uc3RyYWludHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"$2d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmNkZWRpdC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdGZvbnQuYmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdHNlY3QuYmFr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sMjU2cjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sMzg0cjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sNTEycjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sUDI1NnIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sUDM4NHIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sUDUxMnIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y19cNGNhXzkwU09fN2I3YWE3NDMxNDE3M2M3X2Q0MDllYWJmZVViODY4czlmM2IzYWNlZF8xbzRTOC5fZQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_1.png","compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2hhckxvd2VyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhclVwcGVyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2lwaGVyLmV4ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2wgQXBwbGljYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2wgU2VjdXJpdHk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2wgU2V0dXA=","type":"Ansi","source":"Process Commandline","process":null,"filename":"wevtutil.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2wgU3lzdGVt","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VTZXJ2aWNlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29kZSBTaWduaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29sbGVjdCBUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIE5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlndXJhdGlvbiBGbGFncw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCB1cyBPTkxZIGlmIHlvdSBvZmZpY2lhbGx5IHJlcHJlc2VudCB0aGUgd2hvbGUgYWZmZWN0ZWQgbmV0d29yay4=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbFNlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29yRXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlTXV0ZXhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVG9vbGhlbHAzMlNuYXBzaG90","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRfZGV0ZWN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRBY3F1aXJlQ29udGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRBY3F1aXJlQ29udGV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRDcmVhdGVIYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHREZXN0cm95SGFzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRHZW5SYW5kb20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRHZXRIYXNoUGFyYW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRIYXNoRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvbG9ja2Vy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRSZWxlYXNlQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZD1wPXQ9eD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZEE7OUZbVTh7MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGRkZCwgTU1NTSBkZCwgeXl5eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWcudHh0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdIZWFwRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdUcmFjZUxldmVs","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"REVGQVVMVENPTVBOQU1F","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVsZXRlIGNhdGFsb2cgLXF1aWV0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"REVTLUVERTMtQ0JD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVzLWVkZTMtY2Jj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVza3RvcC5pbmk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBQZXJmb3JtYW5jZSBDb3VudGVycw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNvbmZpZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNS","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzdGluZ3Vpc2hlZCBOYW1lIHF1YWxpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZG5RdWFsaWZpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9tYWluIGNvbXBvbmVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE9NQUlOIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZHVwbGljYXRpLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RS1tYWlsIGFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RS1tYWlsIFByb3RlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUMga2V5IGZvciBFQ0RI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEEx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEEyMjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEEyNTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEEzODQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEE1MTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEEx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEEyMjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEEyNTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEEzODQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEE1MTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZW1haWxBZGRyZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdGVkIGZpbGUgU0hPVUxEIE5PVCBjb250YWluIHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiAodGVjaG5pY2FsLCBiYWNrdXBzLCBkYXRhYmFzZXMsIGxhcmdlIGRvY3VtZW50cyku","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJwcmlzZSBDbGllbnQgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVByb2dyYW1GaWxlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVBTZWN1cml0eVNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVBVcGRhdGVTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJhc2VyU3ZjMTE3MTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgQ291bnQgTGltaXQ=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXNnU2hLZXJuZWw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXZlbnRMb2dMZXZlbA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwbG9yZXIuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWQgS2V5IFVzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RkFfU2NoZWR1bGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpbWVUb1N5c3RlbVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRGaWxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRGaWxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlyc3QgQ291bnRlcg==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hGaWxlQnVmZmVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnN1dGlsLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbiBxdWFsaWZpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2VuZXJhdGlvblF1YWxpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJpYyBFQyBrZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tcHV0ZXJOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZUNQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q1BJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRWYXJpYWJsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRWYXJpYWJsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemVFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEFjdGl2ZVBvcHVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9naWNhbERyaXZlU3RyaW5nc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TmF0aXZlU3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hhbmRsZUNvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1RpbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1dpbmRvd1N0YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RyaW5nVHlwZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtV2luZG93c0RpcmVjdG9yeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtV2luZG93c0RpcmVjdG9yeVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VG9rZW5JbmZvcm1hdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck9iamVjdEluZm9ybWF0aW9uVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Vm9sdW1lSW5mb3JtYXRpb25B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2l2ZW4gbmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2Vzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R3JlZXRpbmdzLCBUZXhhcyBEZXBhcnRtZW50IG9mIFRyYW5zcG9ydGF0aW9uIQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"R3JlZXRpbmdzLCBUZXhhcyBEZXBhcnRtZW50IG9mIFRyYW5zcG9ydGF0aW9uIVJlYWQgdGhpcyBtZXNzYWdlIENBUkVGVUxMWSBhbmQgY29udGFjdCBzb21lb25lIGZyb20gSVQgZGVwYXJ0bWVudC5Zb3VyIGZpbGVz","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"$2e","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aCgoKCggICAgICAgICAgICAgICAgICBI","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFJlQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtMjI0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtMjU2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtMzg0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtNTEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG1hY1NIQTIyNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG1hY1NIQTI1Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG1hY1NIQTM4NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG1hY1NIQTUxMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aV92aWV3MzIu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWNvbmNhY2hlLmRi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtY29tbW9uTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtY291bnRyeU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtZG5RdWFsaWZpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtZ2VuZXJhdGlvblF1YWxpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtZ2l2ZW5OYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtaW5pdGlhbHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtbG9jYWxpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtb3JnYW5pemF0aW9uYWxVbml0TmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtb3JnYW5pemF0aW9uTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtcG9zdGFsQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtcG9zdGFsQ29kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtcHNldWRvbnlt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtc2VyaWFsTnVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtc3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtc3VyTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtdGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtdW5pcXVlSWRlbnRpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2UtYmFzaWNDb25zdHJhaW50cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2UtZXh0S2V5VXNhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2Uta2V5VXNhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2Utc3ViamVjdEFsdE5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtZG9tYWluQ29tcG9uZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtZWNQdWJsaWNLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtY2xpZW50QXV0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtY29kZVNpZ25pbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtZW1haWxQcm90ZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtT0NTUFNpZ25pbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3Atc2VydmVyQXV0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtdGltZVN0YW1waW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtbmV0c2NhcGUtY2VydHR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtc2hhMjI0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtc2hhMjU2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtc2hhMzg0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtc2hhNTEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1BUDRTdmM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aW5mb3BhdGgu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5mcmFzdHJ1Y3R1cmUgcmVidWlsZCB3aWxsIGNvc3QgeW91IE1VQ0ggbW9yZS4=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkFuZFNwaW5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWREZWNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRJbmNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNEZWJ1Z2dlclByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZENvZGVQYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2VlcCBMaWJyYXJ5IFJlc2lkZW50","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuRExM","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2V5IFVzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3NfYWN0aW9uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3NfZW1haWwu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3NfcmVwb3J0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3Nfc2NoZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFubWFuV29ya3N0YXRpb24=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFzdCBDb3VudGVy","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGlicmFyeSBWYWxpZGF0aW9uIENvZGU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweW5B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVRocm90dGxpbmc=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFpbCB1czogdHhkb3Q5MTFAcHJvdG9ubWFpbC5jb20=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":0,"total":79},{"value":"TWF4aW11bUFsbG93ZWRBbGxvY2F0aW9uU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJBTVNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TUJFbmRwb2ludEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRW5naW5lU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRnJhbWV3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRnJhbWV3b3JrTWNBZmVlRnJhbWV3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNTaGllbGQ=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWNUYXNrTWFuYWdlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWQ1V2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVzc2FnZSBkaWdlc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVzc2FnZUJveFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TU9ESUZJQ0FUSU9OIG9yIFJFTkFNSU5HIGVuY3J5cHRlZCBmaWxlcyBtYXkgY2F1c2UgZGVjcnlwdGlvbiBmYWlsdXJlLg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW96eXByb2JhY2t1cA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNhY2Nlc3Mu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXNEdHNTZXJ2ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXNEdHNTZXJ2ZXIxMDA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXNEdHNTZXJ2ZXIxMTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFC","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFEVG9wb2xvZ3k=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFudGlzcGFtVXBkYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUVkZ2VTeW5j","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUVT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUZCQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUZEUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUlT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1haWxib3hBc3Npc3RhbnRz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1haWxib3hSZXBsaWNhdGlvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1haWxTdWJtaXNzaW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1HTVQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1UQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVByb3RlY3RlZFNlcnZpY2VIb3N0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVJlcGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVJQQw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNB","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNlYXJjaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNlcnZpY2VIb3N0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNSUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRocm90dGxpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRyYW5zcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRyYW5zcG9ydExvZ1NlYXJjaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNmdGVzcWwkUFJPRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNPTEFQJFNRTF8yMDA4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNPTEFQJFNZU1RFTV9CR0M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNPTEFQJFRQUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNPTEFQJFRQU0FNQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkQktVUEVYRUM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkRUNXREIy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkUFJBQ1RJQ0VNR1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkUFJBQ1RUSUNFQkdD","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkUFJPRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkUFJPRlhFTkdBR0VNRU5U","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU0JTTU9OSVRPUklORw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU0hBUkVQT0lOVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU09QSE9T","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU1FMXzIwMDg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU1FMRVhQUkVTUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU1lTVEVNX0JHQw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkVFBT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkVFBTQU1B","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkVkVFQU1TUUwyMDA4UjI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkVkVFQU1TUUwyMDEy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFBST0ZYRU5HQUdFTUVOVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFNCU01PTklUT1JJTkc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFNIQVJFUE9JTlQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFNRTF8yMDA4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFNZU1RFTV9CR0M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFRQUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFRQU0FNQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTRVJWRVI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTZXJ2ZXJBREhlbHBlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTZXJ2ZXJBREhlbHBlcjEwMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTZXJ2ZXJPTEFQU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXlkZXNrdG9wcW9zLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXlkZXNrdG9wc2VydmljZS4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TkVUQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0QXBpQnVmZmVyRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0TXNtcUFjdGl2YXRvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0c2NhcGUgQ2VydGlmaWNhdGUgVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0U2VydmVyR2V0SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0V2tzdGFHZXRJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gdGhpcmQgcGFydHkgZGVjcnlwdGlvbiBzb2Z0d2FyZSBFWElTVFMu","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"bm90ZXBhZCsrLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnRkZXRlY3QuY29t","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":1,"total":79},{"value":"bnRkbGwuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnR1c2VyLmRhdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2JqZWN0IExpc3Q=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"b2NhdXRvdXBkcy4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T0NTUCBTaWduaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"b204c3RhcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3BlbiBUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3NUb2tlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNDTWFuYWdlckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcnZpY2VX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JhY2xlQ2xpZW50Q2FjaGU4MA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JhY2xlU2VydmljZVhF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JhY2xlWEVUTlNMaXN0ZW5lcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JnYW5pemF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEFkZEJhY2tzbGFzaEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEFwcGVuZEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEZpbGVFeGlzdHNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEZpbmRFeHRlbnNpb25X","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEZpbmRGaWxlTmFtZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEZpbmRGaWxlTmFtZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aElzRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEJFIHdpdGggU0hBMSBhbmQgMi1LZXkgM0RFUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEJFIHdpdGggU0hBMSBhbmQgMy1LZXkgM0RFUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGJlV2l0aFNIQUFuZDItS2V5VHJpcGxlREVTLUNCQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGJlV2l0aFNIQUFuZDMtS2V5VHJpcGxlREVTLUNCQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UERWRlNTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGFsIGFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGFsIGNvZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGFsQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGFsQ29kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGdyZXMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG93ZXJwbnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG93ZXJzaGVsbC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyRmlyc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyRmlyc3RX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyTmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyTmV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHJvY2Vzc2hhY2tlci4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbVc2NDMy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJPcmRlcg==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJQYXRo","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UFNBUEkuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHNldWRvbnlt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHNldWRvbnlt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHZ4aW9zdnIu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHZ4d2luMzIu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlU3RhdHVzRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMDItIGZsb2F0aW5nIHBvaW50IHN1cHBvcnQgbm90IGxvYWRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMDgtIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGFyZ3VtZW50cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMDktIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGVudmlyb25tZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTAtIGFib3J0KCkgaGFzIGJlZW4gY2FsbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTYtIG5vdCBlbm91Z2ggc3BhY2UgZm9yIHRocmVhZCBkYXRh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTctIHVuZXhwZWN0ZWQgbXVsdGl0aHJlYWQgbG9jayBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTgtIHVuZXhwZWN0ZWQgaGVhcCBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTktIHVuYWJsZSB0byBvcGVuIGNvbnNvbGUgZGV2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjQtIG5vdCBlbm91Z2ggc3BhY2UgZm9yIF9vbmV4aXQvYXRleGl0IHRhYmxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjUtIHB1cmUgdmlydHVhbCBmdW5jdGlvbiBjYWxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjYtIG5vdCBlbm91Z2ggc3BhY2UgZm9yIHN0ZGlvIGluaXRpYWxpemF0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjctIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGxvd2lvIGluaXRpYWxpemF0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjgtIHVuYWJsZSB0byBpbml0aWFsaXplIGhlYXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzAtIENSVCBub3QgaW5pdGlhbGl6ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzEtIEF0dGVtcHQgdG8gaW5pdGlhbGl6ZSB0aGUgQ1JUIG1vcmUgdGhhbiBvbmNlLlRoaXMgaW5kaWNhdGVzIGEgYnVnIGluIHlvdXIgYXBwbGljYXRpb24u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzItIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGxvY2FsZSBpbmZvcm1hdGlvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzMtIEF0dGVtcHQgdG8gdXNlIE1TSUwgY29kZSBmcm9tIHRoaXMgYXNzZW1ibHkgZHVyaW5nIG5hdGl2ZSBjb2RlIGluaXRpYWxpemF0aW9uVGhpcyBpbmRpY2F0ZXMgYSBidWcgaW4geW91ciBhcHBsaWNhdGlvbi4gSXQgaXMgbW9zdCBsaWtlbHkgdGhlIHJlc3VsdCBvZiBjYWxsaW5nIGFuIE1TSUwtY29tcGlsZWQgKC9jbHIpIGZ1bmN0aW9uIGZyb20gYSBuYXRpdmUgY29uc3RydWN0b3Igb3IgZnJvbSBEbGxNYWluLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmFuc29tLmV4eA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmFuc29td2FyZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZCB0aGlzIG1lc3NhZ2UgQ0FSRUZVTExZIGFuZCBjb250YWN0IHNvbWVvbmUgZnJvbSBJVCBkZXBhcnRtZW50Lg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFNRTF8yMDA4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFNZU1RFTV9CR0M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFRQUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFRQU0FNQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UklQRU1EMTYw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnBjQ2FjaGVUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggTUQ1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBLTIyNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBLTI1Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBLTM4NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBLTUxMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnNhRW5jcnlwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBU1NBLVBTUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsVW53aW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnVuZGxsMzIuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZSBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZSBFcnJvciFQcm9ncmFtOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U0FWQWRtaW5TZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0FWU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2NodGFza3MuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2NyZWVuY29ubmVjdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDE5Mmsx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDE5MnIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDIyNGsx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDIyNHIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDI1Nmsx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDI1NnIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDM4NHIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDUyMXIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VwTWFzdGVyU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VwdGVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIG51bWJlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VyaWFsTnVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RXJyb3JNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXJFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0S2VybmVsT2JqZWN0U2VjdXJpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvY2Vzc1ByaW9yaXR5Qm9vc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvY2Vzc1NodXRkb3duUGFyYW1ldGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkQWZmaW5pdHlNYXNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkUHJpb3JpdHlCb29zdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhLTFXaXRoUlNBRW5jcnlwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhMjI0V2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhMjU2V2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhMzg0V2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhNTEyV2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hFTEwzMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxFeGVjdXRlRXhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hMV0FQSS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hNb25pdG9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hSZWdTZXRVU1ZhbHVlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0lORyBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2luZ2xlIGJsb2NrIG1zZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2wgU2VjdXJpdHkgL2U6ZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U21jU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U250cFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c28geW91IGhhdmUgbm8gZG91YnRzIGluIHBvc3NpYmlsaXR5IHRvIHJlc3RvcmUgYWxsIGZpbGVzIGZyb20gYWxsIGFmZmVjdGVkIHN5c3RlbXMgQU5ZIFRJTUUu","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3MgTlRcQ3VycmVudFZlcnNpb25cU3lzdGVtUmVzdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcUG9saWNpZXNcTWljcm9zb2Z0XFdpbmRvd3MgTlRcU3lzdGVtUmVzdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEF1dG9VcGRhdGUgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIENsZWFuIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIERldmljZSBDb250cm9sIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEZpbGUgU2Nhbm5lciBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEhlYWx0aCBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIE1DUyBBZ2VudA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIE1DUyBDbGllbnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIE1lc3NhZ2UgUm91dGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFNhZmVzdG9yZSBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFN5c3RlbSBQcm90ZWN0aW9uIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFdlYiBDb250cm9sIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c29waG9zc3Bz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlYWsgRU5HTElTSCB3aGVuIGNvbnRhY3RpbmcgdXMu","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"c3FiY29yZXNlcnZpY2Uu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMIEJhY2t1cHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkQktVUEVYRUM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkQ0lUUklYX01FVEFGUkFNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkQ1hEQg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkRUNXREIy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkUFJBQ1RUSUNFQkdD","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkUFJBQ1RUSUNFTUdU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkUFJPRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkUFJPRlhFTkdBR0VNRU5U","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU0JTTU9OSVRPUklORw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU0hBUkVQT0lOVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU09QSE9T","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU1FMXzIwMDg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU1FMRVhQUkVTUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU1lTVEVNX0JHQw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkVFBT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkVFBTQU1B","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkVkVFQU1TUUwyMDA4UjI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkVkVFQU1TUUwyMDEy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQnJvd3Nlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMc2FmZSBCYWNrdXAgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMc2FmZSBGaWx0ZXIgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMU2FmZU9MUlNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMU0VSVkVSQUdFTlQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMVEVMRU1FVFJZ","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMVEVMRU1FVFJZJEVDV0RCMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMV3JpdGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FNU2VydmljZUxpc3Q=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyQ2F0QnVmZkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRnJvbUdVSUQy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdCBBbHQgTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3VibGltZV90ZXh0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3VjY2Vzc2Z1bCBGaWxlIERhdGU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3ZjR2VuZXJpY0hvc3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3dpX2ZpbHRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3dpX3NlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3dpX3VwZGF0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3dpX3VwZGF0ZV82NA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3dpdGNoVG9UaHJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3ltYW50ZWMgU3lzdGVtIFJlY292ZXJ5","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3luY3RpbWUu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU3RhcnRPcHRpb25z","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtVGltZVRvVHpTcGVjaWZpY0xvY2FsVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCQwI0QkMCN0JFA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCQ4I0QkOCN0JA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCRAI0QkQCN0JA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCRII0QkSCN0JCg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCRQI0QkUCN0JDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCRQI0QkUCN0JEg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGFza2xpc3Qu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGJpcmRjb25maWcu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGVhbXZpZXdlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIE9OTFkgYXR0YWNobWVudHMgd2UgYWNjZXB0IGFyZSBub24gYXJjaGl2ZWQgZW5jcnlwdGVkIGZpbGVzIGZvciB0ZXN0IGRlY3J5cHRpb24u","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFBSSUNFIGRlcGVuZHMgb24gaG93IHF1aWNrbHkgeW91IGRvIGl0Lg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHJlc3Qgb2YgZGF0YSB3aWxsIGJlIGF2YWlsYWJsZSBhZnRlciB0aGUgUEFZTUVOVC4=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"dGhlYmF0NjQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGh1bWJzLmRi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGh1bmRlcmJpcmQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZSBTdGFtcGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VExPU1MgZXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VExTIFdlYiBDbGllbnQgQXV0aGVudGljYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VExTIFdlYiBTZXJ2ZXIgQXV0aGVudGljYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG90YWxJbnN0YW5jZU5hbWU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJlYXRBc1N5c3RlbQ==","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJ1ZUtleVNjaGVkdWxlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJ1ZUtleVNlcnZpY2VIZWxwZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VUkwRGV0ZWN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pcXVlIElkZW50aWZpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dW5pcXVlSWRlbnRpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBkYXRpbmc=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VVJQUVFoIFNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXNlQ29sbGVjdGlvblRocmVhZA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dXNuIGRlbGV0ZWpvdXJuYWwgL0QgQzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW0gQmFja3VwIENhdGFsb2cgRGF0YSBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1CYWNrdXBTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1Ccm9rZXJTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1DYXRhbG9nU3Zj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1DbG91ZFN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1EZXBsb3ltZW50U2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1EZXBsb3lTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1FbnRlcnByaXNlTWFuYWdlclN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1IdkludGVncmF0aW9uU3Zj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1Nb3VudFN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1ORlNTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1SRVNUU3Zj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1UcmFuc3BvcnRTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm1jb21wdXRlLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm1jb25uZWN0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm1uYXQuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm13YXJlLXZteC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvck11bHRpcGxlT2JqZWN0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2JhZG1pbi5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2Uga2luZGx5IGFzayB5b3Ugbm90IHRvIHVzZSBHTUFJTCwgWUFIT08gb3IgTElWRSB0byBjb250YWN0IHVzLg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"V2VkbmVzZGF5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2VyZmF1bHQuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2V2dHV0aWwuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldENsb3NlRW51bQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldEVudW1SZXNvdXJjZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldE9wZW5FbnVtVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d25zcHJpbnRmQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V293NjREaXNhYmxlV293NjRGc1JlZGlyZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V293NjRSZXZlcnRXb3c2NEZzUmVkaXJlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JicE82TWtu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVDb25zb2xlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V1JTVkM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d3NwcmludGZX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V1VTRVIzMi5ETEw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3Zuc3ByaW50ZkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"eGZzc3ZjY29uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"WW91IGNhbiBzZW5kIHVzIGFuIGVuY3J5cHRlZCBmaWxlIChub3QgZ3JlYXRlciB0aGFuIDQwMEtCKSBhbmQgd2Ugd2lsbCBkZWNyeXB0IGl0IEZPUiBGUkVFLA==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"WW91ciBmaWxlcyBhcmUgc2VjdXJlbHkgRU5DUllQVEVELg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"Wm9vbHogMiBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"WndRdWVyeUluZm9ybWF0aW9uUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"WndVbm1hcFZpZXdPZlNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCQ0I0wkNCN8JFQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCQ8I0wkPCN8JA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCREI0wkRCN8JCQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCRMI0wkTCN8JCw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCRUI0wkVCN8JDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCRUI0wkVCN8JEw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"$2f","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"IVRYRE9UX1JFQURfTUUhLnR4dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"KCgoKCggICAgICAgICAgICAgICAgICBI","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"LmFuaXwuY2FifC5jcGx8LmN1cnwuZGlhZ2NhYnwuZGlhZ3BrZ3wuZGxsfC5kcnZ8LmhscHwuaWNsfC5pY25zfC5pY298Lmlzb3wuaWNzfC5sbmt8LmlkeHwubW9kfC5tcGF8Lm1zY3wubXNwfC5tc3N0eWxlc3wubXN1fC5ub21lZGlhfC5vY3h8LnByZnwucnRwfC5zY3J8LnNoc3wuc3BsfC5zeXN8LnRoZW1lfC50aGVtZXBhY2t8LmV4ZXwuYmF0fC5jbWR8LnVybHwubXVp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0NoYW5nZSAvVE4gIlxNaWNyb3NvZnRcV2luZG93c1xTeXN0ZW1SZXN0b3JlXFNSIiAvZGlzYWJsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"L3NldCB7ZGVmYXVsdH0gYm9vdHN0YXR1c3BvbGljeSBpZ25vcmVhbGxmYWlsdXJlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCA4JDgoOCw4MDg0ODg4PDhAOEQ4SDhMOFA4VDhYOHA6dDp4Onw6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSA6KDosOjQ6PDpAOkg6UDpUOlw6ZDpoOnA6eDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSs6OjpVOlw6eTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OiA6LzpFOlI6ajp0Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OiE6KDo0Ojo6QTpQOlY6XTpsOnI6eTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oic6MTo7OkU6TzpZOmM6bTp3Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oic6WzpmOnA6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oi06NDo4Ojw6QDpEOkg6TDpQOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ojw6QjpIOl06ajpyOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlwkcmVjeWNsZS5iaW5c","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Olxkcml2ZXJzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlxlZnN0bXB3cFw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlxwZXJmbG9nc1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Olxwcm9ncmFtZGF0YVw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFsbCB1c2Vyc1xtaWNyb3NvZnRc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFcbG9jYWxc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFcbG9jYWxsb3dc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFccm9hbWluZ1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGluZXRwdWJcbG9nc1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDM3Qy0tMTI2MjA5MDQ4NS00ODI3NjUxMjkzNzI0MjE4NjUtMTkyOTE2MjkxMTEyMjUwMjU4OTgxMzk0NjY1MjI3Mjg3NTQ5MjA1LTUwOTA1NjExMA==","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDM4NC0tNzY4MDU0ODgyMTAwMDQ5MjQzNC0xMTIxNzI2MzIzLTE4MTE2NTIzNzItMTUzMjIyNjc3MC00OTgzNDQwMjkxNDc1MDQ0NDU1LTIwNzI4NjYxNDA=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDREOC01OTk0NzM2Mzg2NjY0NTAwOTYxNTEzMTgzMjExLTEyMDMyNzYyNjUxMTcwNzczNDU4ODg1MDUyMDI5MjA2MDYwNTcwMDEwMTY2NTc2OTQ=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDU5Qy0xMzQ1NDM5MzUxLTE1Nzg4NTI1NTUtODg1OTE0MzE4LTE2ODcxODE1NDAxNTkwNTc3MDIzODU4MjYzODEzLTQ0NDQwOTY4MDY0NjkwOTg=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDVBMC0tMTM2NzgxNTY1NC04MTI0NjY3OTctMTk4MDg0NTAzOC00MjQyNjc1NTY1MzI2NDIzMDQtMTg2MzQ4NDUxMC0xNjY3MDc3Nzk0LTIwODk1MDA1NDk=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDg2Qy0tMjA3NTUyOTY4MS0xNzY0OTQ4NDI3NTEyNTY2OTE5LTE2MjY3OTUxNTItMjA3OTQ0MjA5MC0xMTUyODU2OTczLTE4NTM2MDMwNjUtMTY3MjYxNjA3NQ==","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDlEMC0yNTUxMzQ3NTUtOTgyNDQ0NTktMTUwNzkxMTc5Ny0xMjQ5NDQwMzQwOTEwOTYyOTkzLTE3MTUzOTUwOTUtMTIwMTIzMjA4ODE2MzA2MjY1MTM=","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEEzNC0zNDM1Nzc2MTUxODA2NDEyODMtMTI5NzM4NTQ5Ny04MzMxNjk2OTAzOTE3MDk5ODkxOTU4NjcwODgtMTg1NjY5NzcxOTI4NzA3MjM4NQ==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEE0NC0xNTQ4NDYzNTg0LTU3Mzg4MDk1NjE1OTczMDk1MTEzMzYzMDY1NjctMTgyNzg5MTg5OTg4ODA0MjA4Ni0xNjMzOTgwMjkwMTYwNDE2Njk1Nw==","type":"Unicode","source":"Runtime Data","process":"fsutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEE3Qy0tNDU2NTczNDE4LTIwNDA3NzcxMzktMTMyOTYzNTExNi0xNjUyNDM4NjE1MjEyNjc2MTA4MjkzNTY5NTk0Mjc3MjU3MTYzNy0xMjY1NjM2Njgy","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEIxMC00MjI2NTIyNjY2NDU4NzYwMTIxOTUzNTMxMjYyLTE2Mjk2MjcwODQ0OTMzNzgyODcxOTMwNDAzMDIzLTk1NTUzOTA1NDU4NzQyODU2Mg==","type":"Unicode","source":"Runtime Data","process":"schtasks.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEQ1OC0tNDQ2MTMzOTA4MTUzMzgxNTM0OTI1Mzg3NTE3MjExMTI4ODc4MDUzOTE5MDEyMjI2ODY3MTA2MzIyMjY0MDY0NTgtMTA5NjE0MjMxOA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEY3OC0tMTYwOTA5NjgzNy00NTE2NzYxNDktODc5Nzg2MjkxNzMxMDU4MDk4LTEzNDYxNjg0MzM2MzUwOTU1ODc1OTQzODc1Mi03OTQ1NjY3NjU=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEZDQy0tMTU5MTgxNjM4Ny0xNTgwNjA2ODA3LTE0OTc5NzY3NDYxNDkwNDc5MzMzMzI3Njk3OTI3LTE4MjIzNzE4MzYxNzIxMDQxNzc0LTE2MDQ0MDU1NjI=","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzdGVtMzJc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzdGVtXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzd293NjRc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncd2luc3hzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25pcyBWU1MgUHJvdmlkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25pc0FnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25peEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyU2NoMlN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QU1pY3Jvc29mdCBWaXN1YWwgQysrIFJ1bnRpbWUgTGlicmFyeQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW50aXZpcnVz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXV0b3J1bi5pbmY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QWNjZWxlcmF0b3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QnJvd3Nlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0RldmljZU1lZGlhU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0pvYkVuZ2luZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY01hbmFnZW1lbnRTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1JQQ1NlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1ZTU1Byb3ZpZGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"$30","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmNkZWRpdC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdGZvbnQuYmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2lwaGVyLmV4ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VTZXJ2aWNlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIE5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbFNlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29yRXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlTXV0ZXhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRfZGV0ZWN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRHZXRIYXNoUGFyYW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvbG9ja2Vy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"REVGQVVMVENPTVBOQU1F","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9tYWluIGNvbXBvbmVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE9NQUlOIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RS1tYWlsIGFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUMga2V5IGZvciBFQ0RI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZW1haWxBZGRyZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdGVkIGZpbGUgU0hPVUxEIE5PVCBjb250YWluIHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiAodGVjaG5pY2FsLCBiYWNrdXBzLCBkYXRhYmFzZXMsIGxhcmdlIGRvY3VtZW50cyku","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJwcmlzZSBDbGllbnQgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVBTZWN1cml0eVNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVBVcGRhdGVTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJhc2VyU3ZjMTE3MTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgQ291bnQgTGltaXQ=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXNnU2hLZXJuZWw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwbG9yZXIuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWQgS2V5IFVzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RkFfU2NoZWR1bGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnN1dGlsLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJpYyBFQyBrZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tcHV0ZXJOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZUNQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q1BJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRWYXJpYWJsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRWYXJpYWJsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemVFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEFjdGl2ZVBvcHVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9naWNhbERyaXZlU3RyaW5nc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TmF0aXZlU3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hhbmRsZUNvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1RpbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1dpbmRvd1N0YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RyaW5nVHlwZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtV2luZG93c0RpcmVjdG9yeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtV2luZG93c0RpcmVjdG9yeVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VG9rZW5JbmZvcm1hdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck9iamVjdEluZm9ybWF0aW9uVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Vm9sdW1lSW5mb3JtYXRpb25B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JlZXRpbmdzLCBUZXhhcyBEZXBhcnRtZW50IG9mIFRyYW5zcG9ydGF0aW9uIQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"R3JlZXRpbmdzLCBUZXhhcyBEZXBhcnRtZW50IG9mIFRyYW5zcG9ydGF0aW9uIVJlYWQgdGhpcyBtZXNzYWdlIENBUkVGVUxMWSBhbmQgY29udGFjdCBzb21lb25lIGZyb20gSVQgZGVwYXJ0bWVudC5Zb3VyIGZpbGVz","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"$31","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aCgoKCggICAgICAgICAgICAgICAgICBI","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtY29tbW9uTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtbG9jYWxpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtcG9zdGFsQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtcG9zdGFsQ29kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2UtZXh0S2V5VXNhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2Uta2V5VXNhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtZG9tYWluQ29tcG9uZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtZWNQdWJsaWNLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5mb3BhdGgu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5mcmFzdHJ1Y3R1cmUgcmVidWlsZCB3aWxsIGNvc3QgeW91IE1VQ0ggbW9yZS4=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2V5IFVzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3NfcmVwb3J0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFpbCB1czogdHhkb3Q5MTFAcHJvdG9ubWFpbC5jb20=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":0,"total":79},{"value":"TUJBTVNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TUJFbmRwb2ludEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRW5naW5lU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRnJhbWV3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRnJhbWV3b3JrTWNBZmVlRnJhbWV3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVzc2FnZUJveFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TU9ESUZJQ0FUSU9OIG9yIFJFTkFNSU5HIGVuY3J5cHRlZCBmaWxlcyBtYXkgY2F1c2UgZGVjcnlwdGlvbiBmYWlsdXJlLg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFC","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFEVG9wb2xvZ3k=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFudGlzcGFtVXBkYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUVkZ2VTeW5j","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUVT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUZCQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVByb3RlY3RlZFNlcnZpY2VIb3N0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNlcnZpY2VIb3N0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRocm90dGxpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRyYW5zcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRyYW5zcG9ydExvZ1NlYXJjaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkQktVUEVYRUM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU09QSE9T","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTZXJ2ZXJPTEFQU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXlkZXNrdG9wc2VydmljZS4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0U2VydmVyR2V0SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0V2tzdGFHZXRJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnRkZXRlY3QuY29t","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":1,"total":79},{"value":"T3BlblByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3NUb2tlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcnZpY2VX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JhY2xlU2VydmljZVhF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JhY2xlWEVUTlNMaXN0ZW5lcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEJFIHdpdGggU0hBMSBhbmQgMi1LZXkgM0RFUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEJFIHdpdGggU0hBMSBhbmQgMy1LZXkgM0RFUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGJlV2l0aFNIQUFuZDItS2V5VHJpcGxlREVTLUNCQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGJlV2l0aFNIQUFuZDMtS2V5VHJpcGxlREVTLUNCQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UERWRlNTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGFsIGFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGFsIGNvZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGFsQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGFsQ29kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGdyZXMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG93ZXJzaGVsbC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyRmlyc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyRmlyc3RX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyTmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyTmV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHJvY2Vzc2hhY2tlci4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlU3RhdHVzRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMDItIGZsb2F0aW5nIHBvaW50IHN1cHBvcnQgbm90IGxvYWRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTctIHVuZXhwZWN0ZWQgbXVsdGl0aHJlYWQgbG9jayBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTgtIHVuZXhwZWN0ZWQgaGVhcCBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzItIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGxvY2FsZSBpbmZvcm1hdGlvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzMtIEF0dGVtcHQgdG8gdXNlIE1TSUwgY29kZSBmcm9tIHRoaXMgYXNzZW1ibHkgZHVyaW5nIG5hdGl2ZSBjb2RlIGluaXRpYWxpemF0aW9uVGhpcyBpbmRpY2F0ZXMgYSBidWcgaW4geW91ciBhcHBsaWNhdGlvbi4gSXQgaXMgbW9zdCBsaWtlbHkgdGhlIHJlc3VsdCBvZiBjYWxsaW5nIGFuIE1TSUwtY29tcGlsZWQgKC9jbHIpIGZ1bmN0aW9uIGZyb20gYSBuYXRpdmUgY29uc3RydWN0b3Igb3IgZnJvbSBEbGxNYWluLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFNRTF8yMDA4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFNZU1RFTV9CR0M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFRQUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFRQU0FNQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnVuZGxsMzIuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZSBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZSBFcnJvciFQcm9ncmFtOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U0FWQWRtaW5TZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0FWU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2NodGFza3MuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2NyZWVuY29ubmVjdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VwTWFzdGVyU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RXJyb3JNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvY2Vzc1ByaW9yaXR5Qm9vc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvY2Vzc1NodXRkb3duUGFyYW1ldGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxFeGVjdXRlRXhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hSZWdTZXRVU1ZhbHVlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0lORyBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U21jU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U250cFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3MgTlRcQ3VycmVudFZlcnNpb25cU3lzdGVtUmVzdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcUG9saWNpZXNcTWljcm9zb2Z0XFdpbmRvd3MgTlRcU3lzdGVtUmVzdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEF1dG9VcGRhdGUgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIENsZWFuIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIERldmljZSBDb250cm9sIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEZpbGUgU2Nhbm5lciBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEhlYWx0aCBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFNhZmVzdG9yZSBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFN5c3RlbSBQcm90ZWN0aW9uIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFdlYiBDb250cm9sIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c29waG9zc3Bz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3FiY29yZXNlcnZpY2Uu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkQktVUEVYRUM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkQ0lUUklYX01FVEFGUkFNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMc2FmZSBCYWNrdXAgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMc2FmZSBGaWx0ZXIgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMU2FmZU9MUlNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FNU2VydmljZUxpc3Q=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3dpX3NlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU3RhcnRPcHRpb25z","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtVGltZVRvVHpTcGVjaWZpY0xvY2FsVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGhlYmF0NjQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VExPU1MgZXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG90YWxJbnN0YW5jZU5hbWU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJ1ZUtleVNjaGVkdWxlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJ1ZUtleVNlcnZpY2VIZWxwZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW0gQmFja3VwIENhdGFsb2cgRGF0YSBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1EZXBsb3ltZW50U2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1UcmFuc3BvcnRTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm1jb21wdXRlLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm1uYXQuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm13YXJlLXZteC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2JhZG1pbi5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2VyZmF1bHQuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2V2dHV0aWwuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V1JTVkM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Wm9vbHogMiBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"WndRdWVyeUluZm9ybWF0aW9uUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"$32","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","strings":[{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5eltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlae3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ITAqMDYwUDBaMGAwbDByMHsw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ITAzMDswQTBZMF8wZjByMHgw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRYRE9UX1JFQURfTUUhLnR4dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiIiIiIiIiIiIiIiIiIiIg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"I3wkKCNcJCwz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"KCgoKCggICAgICAgICAgICAgICAgICBI","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"LmFuaXwuY2FifC5jcGx8LmN1cnwuZGlhZ2NhYnwuZGlhZ3BrZ3wuZGxsfC5kcnZ8LmhscHwuaWNsfC5pY25zfC5pY298Lmlzb3wuaWNzfC5sbmt8LmlkeHwubW9kfC5tcGF8Lm1zY3wubXNwfC5tc3N0eWxlc3wubXN1fC5ub21lZGlhfC5vY3h8LnByZnwucnRwfC5zY3J8LnNoc3wuc3BsfC5zeXN8LnRoZW1lfC50aGVtZXBhY2t8LmV4ZXwuYmF0fC5jbWR8LnVybHwubXVp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0NoYW5nZSAvVE4gIlxNaWNyb3NvZnRcV2luZG93c1xTeXN0ZW1SZXN0b3JlXFNSIiAvZGlzYWJsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"L3NldCB7ZGVmYXVsdH0gYm9vdHN0YXR1c3BvbGljeSBpZ25vcmVhbGxmYWlsdXJlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"L3NldCB7ZGVmYXVsdH0gcmVjb3ZlcnllbmFibGVkIG5v","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MCAwJDAoMCwwMDA0MDgwPDBAMEQwSDBMMFAwVDBYMFwwYDBkMGgwbDBwMHQweDB8MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MDwwSDBTMF4wbTB5MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxMDE0MTgxPDFAMUQxSDFMMVAxVDFYMVwxYDFkMWgxbDFwMXQxeDF8MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMTAxNDE4MTwxQDFEMUgxTDFQMVQxWDFcMWAxZDFoMWwxcDF0MXgxfDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSMxKTEzMTkxPjFDMUgxTTFTMVgxXTFiMWcxbTF0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSQxLDE0MTwxRDFMMVQxXDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MScxNzFVMV0xZjFtMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MUMxSTFzMXkx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MUoyWTJpMnky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiAyJDIoMiwyMDI0MjgyPDJAMkQySDJMMlAyVDJYMlwyYDJkMmgybDJwMnQyeDJ8Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiMyKTIwMjwyQjJJMlUyWzJiMnEydzJ+Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiUyLTI5MkUyVzJpMnsy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MikyMzI9MkcyVzJ1Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MikyTzJtMnQyeDJ8Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiszSzM7NGQ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjAyOzJDMlMyWTJqMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjAzNzNHM1czYjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjEyQzJVMmcyeTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjIyOjJmMmwy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Mj0zQjNJM1AzZDN9Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MkMyUjJsMnMyfjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MyAzJDMoMywzMDM0MzgzPDNAM0QzSDNMM1AzVDNYM1wzYDNkM2gzbDNwM3QzeDN8Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MyUzNzM/M0UzXTNjM2ozdjN8Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Myo0OTRJNFk0ZDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"MyszODNDM0kzUzNZM14zYzNoM20zczN4M30z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkLCN8JDgjXCQ8Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkNCN8JEAjXCREMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkPCN8JEgjXCRMMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkTCN8JFAjXCRUMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"M1wkVCN8JCAjXCQkMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0MDQ0NDg0PDRANEQ0SDRMNFA0VDRYNFw0YDRkNGg0bDRwNHQ0eDR8NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0djR8NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCQ0KDQsNDA0ODQ8NEA0RDRMNFA0VDRYNGA0ZDRoNGw0dDR4NHw0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCU0MjRJNGA0cTQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCk0VjRcNHo0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NDE1PjVbNWU1azVxNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NEg1TjVUNVo1YDVmNW01dDV7NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NEw1UDVWNVo1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSA1JDUoNSw1MDU0NTg1PDVANUQ1SDVMNVA1VDVYNVw1YDVoNWw1cDV0NXg1fDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSA1KDUsNTA1NDU8NUA1RDVINVA1VDVYNVw1ZDVoNWw1cDV4NXw1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSE1JzUuNT01QzVKNVY1XzV5NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSE1STVXNWQ1dDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSE3NDdZN3Y3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSc1NDU5NUc1IjZFNlA2czY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NS41NTVBNXE1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NiA2JDYoNiw2MDY0Njg2PDZANkQ2SDZMNlA2VDZYNlw2YDZkNmg2bDZwNnQ2eDZ8Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NiA2KDYsNjA2ODY8NkA2SDZMNlA2WDZcNmA2aDZsNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NiQ2LDZINn42","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NyA3JDcoNyw3MDc0Nzg3PDdAN0Q3SDdMN1A3VDdYN1w3YDdkN2g3bDdwN3Q3eDd8Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NyI3OTdLN2Y3czc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NyM3LjczNzw3RjdRNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Nyg3MDc0N0A3SDdMN1g3YDdkN3A3eDd8Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ny43PTdPN1Y3YjdyNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"NzE3PjdKN1Q3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Nzg3PjdIN1c3XTdkN3A3djd9Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCA4JDgoOCw4MDg0ODg4PDhAOEQ4SDhMOFA4VDhYOHA6dDp4Onw6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCA4KDgsODQ4PDhAOEg4UDhUOFw4ZDhoOHA4eDh8OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCU4Ljg3OEA4SThSOFs4eDl8OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCg4RThUOG04","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCk4Ljg8OFc4XDh+OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCk4NzhHOE04ZDhqOHE4fTg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OC84PDhCOFw4czg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ODE4QThUOGM4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ODkqOTA5QDlNOWU5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ODk5SjlrOXo5QT5QPmk+ez4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSA6KDosOjQ6PDpAOkg6UDpUOlw6ZDpoOnA6eDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSM5LTk3OUE5SzlVOV85aTlzOX05","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSQ5LDkwOVg5YDlkOWw5dDl4OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSs6OjpVOlw6eTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OUg5TzlZOWA5ZzluOXU5fDk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OVk5YDltOXM5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OiA6LzpFOlI6ajp0Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OiE6KDo0Ojo6QTpQOlY6XTpsOnI6eTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oic6MTo7OkU6TzpZOmM6bTp3Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oic6WzpmOnA6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oi06NDo4Ojw6QDpEOkg6TDpQOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ojw6QjpIOl06ajpyOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlwkcmVjeWNsZS5iaW5c","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Olxkcml2ZXJzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlxlZnN0bXB3cFw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlxwZXJmbG9nc1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Olxwcm9ncmFtZGF0YVw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Olx3aW5kb3dzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyA7JDsoOyw7MDs0Ozg7PDtAO0Q7SDtMO1A7VDtYO1w7YDtkO2g7bDtwO3Q7eDt8Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyA7LjtDO007czs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyE7Kzs1Oz87STtTO107ZztxO3s7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyE7Njs/O0o7TztzOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyM7ODs2P0U/XT8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OyY7ODtYO2w7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oyo7Lzs1Oz07SDtkOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"OzY8PDxAPEQ8SDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ozg7PztEO0g7TDttOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"O0x1L2V4bWEv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCA8JDwoPCw8MDw0PDg8PDxAPEQ8SDxMPFA8VDxYPFw8YDxkPGg8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCI9Lj1BPVM9bj12PX49","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCM9KT0xPXg9fT0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCQ8MzxSPFc8bjw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PCU8Lzw5PEM8TTxXPGE8azx1PA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC49QT1ZPXk9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PEE8STxePGk8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHByb2dyYW0gbmFtZSB1bmtub3duPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSA9JD0oPSw9MD00PTg9PD1APUQ9SD1MPVA9VD1YPVw9YD1kPWg9bD1wPXQ9eD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSI9RD1TPX49","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSg9Lz1YPWk9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSk9Mz09PUc9UT1bPWU9bz15PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PSw9OD08PUA9RD1IPUw9UD1UPVg9XD1gPWQ9aD1sPXA9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiA+JD4oPiw+MD40Pjg+PD5APkg+TD5QPlQ+WD5cPmA+ZD5oPmw+cD50Png+fD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiI+Mj44PkI+Rz5NPl0+cD55Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiM+LT43PkE+Sz5VPl8+aT5zPn0+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiQ+MD40Pjg+PD5APkQ+SD5MPlQ+YD5kPmg+bD5wPnQ+eD58Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PyA/JD8oPyw/MD80Pzg/PD9AP0Q/SD9MP1A/VD9YP1w/YD9kP2g/bD9wP3Q/eD98Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"PyY/Lz9DP00/ZT9zP3k/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Pyc/MT87P0U/Tz9ZP2A/Zz9uP3U/fD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"P1JlZmxlY3RpdmVMb2FkZXJAQFlHS1BBWEBa","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFsbCB1c2Vyc1xtaWNyb3NvZnRc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFcbG9jYWxc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFcbG9jYWxsb3dc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGFwcGRhdGFccm9hbWluZ1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGluZXRwdWJcbG9nc1w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzdGVtMzJc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzdGVtXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncc3lzd293NjRc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpbmRvd3Ncd2luc3hzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGJjZGVjZGVmZGVmZ2VmZ2hmZ2hpZ2hpamhpamtpamtsamtsbWtsbW5sbW5vbW5vcG5vcHE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hiY2RlZmdoaWNkZWZnaGlqZGVmZ2hpamtlZmdoaWprbGZnaGlqa2xtZ2hpamtsbW5oaWprbG1ub2lqa2xtbm9wamtsbW5vcHFrbG1ub3Bxcmxtbm9wcXJzbW5vcHFyc3Rub3BxcnN0dQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ejAxMjM0NTY3ODk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25pcyBWU1MgUHJvdmlkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25pc0FnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25peEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNyU2NoMlN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWdudHN2Yy5hZ250c3ZjLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWdudHN2Yy5lbmNzdmMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QU1pY3Jvc29mdCBWaXN1YWwgQysrIFJ1bnRpbWUgTGlicmFyeQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW50aXZpcnVz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXV0b3J1bi5pbmY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QWNjZWxlcmF0b3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QnJvd3Nlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0RldmljZU1lZGlhU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0pvYkVuZ2luZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY01hbmFnZW1lbnRTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1JQQ1NlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1ZTU1Byb3ZpZGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFzaWMgQ29uc3RyYWludHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"$33","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmNkZWRpdC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdGZvbnQuYmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdHNlY3QuYmFr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sMjU2cjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sMzg0cjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sNTEycjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sUDI1NnIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sUDM4NHIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnJhaW5wb29sUDUxMnIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhckxvd2VyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhclVwcGVyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2lwaGVyLmV4ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2wgQXBwbGljYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2wgU2VjdXJpdHk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2wgU3lzdGVt","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VTZXJ2aWNlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29kZSBTaWduaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIE5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbFNlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29yRXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlTXV0ZXhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVG9vbGhlbHAzMlNuYXBzaG90","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRfZGV0ZWN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRBY3F1aXJlQ29udGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRBY3F1aXJlQ29udGV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRDcmVhdGVIYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHREZXN0cm95SGFzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRHZW5SYW5kb20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRHZXRIYXNoUGFyYW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRIYXNoRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvbG9ja2Vy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRSZWxlYXNlQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZD1wPXQ9eD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZEE7OUZbVTh7MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGRkZCwgTU1NTSBkZCwgeXl5eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWcudHh0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"REVGQVVMVENPTVBOQU1F","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVsZXRlIGNhdGFsb2cgLXF1aWV0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"REVTLUVERTMtQ0JD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVzLWVkZTMtY2Jj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGVza3RvcC5pbmk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNvbmZpZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNS","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzdGluZ3Vpc2hlZCBOYW1lIHF1YWxpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZG5RdWFsaWZpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9tYWluIGNvbXBvbmVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE9NQUlOIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZHVwbGljYXRpLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RS1tYWlsIGFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RS1tYWlsIFByb3RlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUMga2V5IGZvciBFQ0RI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEEx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEEyMjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEEyNTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEEzODQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0Egd2l0aCBTSEE1MTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEEx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEEyMjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEEyNTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEEzODQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWNkc2Etd2l0aC1TSEE1MTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZW1haWxBZGRyZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5jb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJwcmlzZSBDbGllbnQgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVByb2dyYW1GaWxlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVBTZWN1cml0eVNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVBVcGRhdGVTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJhc2VyU3ZjMTE3MTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXNnU2hLZXJuZWw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwbG9yZXIuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWQgS2V5IFVzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RkFfU2NoZWR1bGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpbWVUb1N5c3RlbVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRGaWxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRGaWxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hGaWxlQnVmZmVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnN1dGlsLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbiBxdWFsaWZpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2VuZXJhdGlvblF1YWxpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJpYyBFQyBrZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tcHV0ZXJOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZUNQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q1BJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRWYXJpYWJsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRWYXJpYWJsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemVFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEFjdGl2ZVBvcHVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9naWNhbERyaXZlU3RyaW5nc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TmF0aXZlU3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hhbmRsZUNvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1RpbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1dpbmRvd1N0YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RyaW5nVHlwZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtV2luZG93c0RpcmVjdG9yeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtV2luZG93c0RpcmVjdG9yeVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VG9rZW5JbmZvcm1hdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck9iamVjdEluZm9ybWF0aW9uVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Vm9sdW1lSW5mb3JtYXRpb25B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2l2ZW4gbmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"$34","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aCgoKCggICAgICAgICAgICAgICAgICBI","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFJlQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtMjI0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtMjU2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtMzg0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SE1BQy1TSEEtNTEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG1hY1NIQTIyNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG1hY1NIQTI1Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG1hY1NIQTM4NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG1hY1NIQTUxMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aV92aWV3MzIu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWNvbmNhY2hlLmRi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtY29tbW9uTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtY291bnRyeU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtZG5RdWFsaWZpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtZ2VuZXJhdGlvblF1YWxpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtZ2l2ZW5OYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtaW5pdGlhbHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtbG9jYWxpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtb3JnYW5pemF0aW9uYWxVbml0TmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtb3JnYW5pemF0aW9uTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtcG9zdGFsQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtcG9zdGFsQ29kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtcHNldWRvbnlt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtc2VyaWFsTnVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtc3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtc3VyTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtdGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtYXQtdW5pcXVlSWRlbnRpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2UtYmFzaWNDb25zdHJhaW50cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2UtZXh0S2V5VXNhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2Uta2V5VXNhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtY2Utc3ViamVjdEFsdE5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtZG9tYWluQ29tcG9uZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtZWNQdWJsaWNLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtY2xpZW50QXV0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtY29kZVNpZ25pbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtZW1haWxQcm90ZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtT0NTUFNpZ25pbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3Atc2VydmVyQXV0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQta3AtdGltZVN0YW1waW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtbmV0c2NhcGUtY2VydHR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtc2hhMjI0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtc2hhMjU2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtc2hhMzg0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWQtc2hhNTEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5mb3BhdGgu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkFuZFNwaW5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWREZWNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRJbmNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNEZWJ1Z2dlclByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZENvZGVQYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuRExM","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2V5IFVzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3NfYWN0aW9uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3NfZW1haWwu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3NfcmVwb3J0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"a3Nfc2NoZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweW5B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TUJBTVNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TUJFbmRwb2ludEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRW5naW5lU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRnJhbWV3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNBZmVlRnJhbWV3b3JrTWNBZmVlRnJhbWV3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWNUYXNrTWFuYWdlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWQ1V2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVzc2FnZSBkaWdlc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVzc2FnZUJveFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW96eXByb2JhY2t1cA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNhY2Nlc3Mu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXNEdHNTZXJ2ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXNEdHNTZXJ2ZXIxMDA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXNEdHNTZXJ2ZXIxMTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFC","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFEVG9wb2xvZ3k=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUFudGlzcGFtVXBkYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUVkZ2VTeW5j","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUVT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUZCQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUZEUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZUlT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1haWxib3hBc3Npc3RhbnRz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1haWxib3hSZXBsaWNhdGlvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1haWxTdWJtaXNzaW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1HTVQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZU1UQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVByb3RlY3RlZFNlcnZpY2VIb3N0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVJlcGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVJQQw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNB","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNlYXJjaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNlcnZpY2VIb3N0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVNSUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRocm90dGxpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRyYW5zcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNFeGNoYW5nZVRyYW5zcG9ydExvZ1NlYXJjaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNmdGVzcWwkUFJPRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNPTEFQJFNRTF8yMDA4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNPTEFQJFNZU1RFTV9CR0M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNPTEFQJFRQUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNPTEFQJFRQU0FNQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkQktVUEVYRUM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkRUNXREIy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkUFJBQ1RJQ0VNR1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkUFJBQ1RUSUNFQkdD","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkUFJPRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkUFJPRlhFTkdBR0VNRU5U","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU0JTTU9OSVRPUklORw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU0hBUkVQT0lOVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU09QSE9T","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU1FMXzIwMDg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU1FMRVhQUkVTUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkU1lTVEVNX0JHQw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkVFBT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkVFBTQU1B","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkVkVFQU1TUUwyMDA4UjI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUwkVkVFQU1TUUwyMDEy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFBST0ZYRU5HQUdFTUVOVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFNCU01PTklUT1JJTkc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFNIQVJFUE9JTlQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFNRTF8yMDA4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFNZU1RFTV9CR0M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFRQUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxGRExhdW5jaGVyJFRQU0FNQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTRVJWRVI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTZXJ2ZXJBREhlbHBlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTZXJ2ZXJBREhlbHBlcjEwMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNTUUxTZXJ2ZXJPTEFQU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXlkZXNrdG9wcW9zLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXlkZXNrdG9wc2VydmljZS4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TkVUQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0QXBpQnVmZmVyRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0TXNtcUFjdGl2YXRvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0c2NhcGUgQ2VydGlmaWNhdGUgVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0U2VydmVyR2V0SW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0V2tzdGFHZXRJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bm90ZXBhZCsrLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnRkZXRlY3QuY29t","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":1,"total":79},{"value":"bnRkbGwuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnR1c2VyLmRhdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2NhdXRvdXBkcy4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T0NTUCBTaWduaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"b204c3RhcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3NUb2tlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNDTWFuYWdlckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcnZpY2VX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JhY2xlQ2xpZW50Q2FjaGU4MA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JhY2xlU2VydmljZVhF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JhY2xlWEVUTlNMaXN0ZW5lcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JnYW5pemF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEFkZEJhY2tzbGFzaEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEFwcGVuZEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEZpbGVFeGlzdHNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEZpbmRFeHRlbnNpb25X","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEZpbmRGaWxlTmFtZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aEZpbmRGaWxlTmFtZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aElzRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEJFIHdpdGggU0hBMSBhbmQgMi1LZXkgM0RFUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEJFIHdpdGggU0hBMSBhbmQgMy1LZXkgM0RFUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGJlV2l0aFNIQUFuZDItS2V5VHJpcGxlREVTLUNCQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGJlV2l0aFNIQUFuZDMtS2V5VHJpcGxlREVTLUNCQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UERWRlNTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGFsIGFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGFsIGNvZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGFsQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGFsQ29kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG9zdGdyZXMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG93ZXJwbnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cG93ZXJzaGVsbC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyRmlyc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyRmlyc3RX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyTmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyTmV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHJvY2Vzc2hhY2tlci4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbVc2NDMy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFNBUEkuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHNldWRvbnlt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHNldWRvbnlt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHZ4aW9zdnIu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHZ4d2luMzIu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlU3RhdHVzRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMDItIGZsb2F0aW5nIHBvaW50IHN1cHBvcnQgbm90IGxvYWRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMDgtIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGFyZ3VtZW50cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMDktIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGVudmlyb25tZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTAtIGFib3J0KCkgaGFzIGJlZW4gY2FsbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTYtIG5vdCBlbm91Z2ggc3BhY2UgZm9yIHRocmVhZCBkYXRh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTctIHVuZXhwZWN0ZWQgbXVsdGl0aHJlYWQgbG9jayBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTgtIHVuZXhwZWN0ZWQgaGVhcCBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMTktIHVuYWJsZSB0byBvcGVuIGNvbnNvbGUgZGV2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjQtIG5vdCBlbm91Z2ggc3BhY2UgZm9yIF9vbmV4aXQvYXRleGl0IHRhYmxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjUtIHB1cmUgdmlydHVhbCBmdW5jdGlvbiBjYWxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjYtIG5vdCBlbm91Z2ggc3BhY2UgZm9yIHN0ZGlvIGluaXRpYWxpemF0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjctIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGxvd2lvIGluaXRpYWxpemF0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMjgtIHVuYWJsZSB0byBpbml0aWFsaXplIGhlYXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzAtIENSVCBub3QgaW5pdGlhbGl6ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzEtIEF0dGVtcHQgdG8gaW5pdGlhbGl6ZSB0aGUgQ1JUIG1vcmUgdGhhbiBvbmNlLlRoaXMgaW5kaWNhdGVzIGEgYnVnIGluIHlvdXIgYXBwbGljYXRpb24u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzItIG5vdCBlbm91Z2ggc3BhY2UgZm9yIGxvY2FsZSBpbmZvcm1hdGlvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UjYwMzMtIEF0dGVtcHQgdG8gdXNlIE1TSUwgY29kZSBmcm9tIHRoaXMgYXNzZW1ibHkgZHVyaW5nIG5hdGl2ZSBjb2RlIGluaXRpYWxpemF0aW9uVGhpcyBpbmRpY2F0ZXMgYSBidWcgaW4geW91ciBhcHBsaWNhdGlvbi4gSXQgaXMgbW9zdCBsaWtlbHkgdGhlIHJlc3VsdCBvZiBjYWxsaW5nIGFuIE1TSUwtY29tcGlsZWQgKC9jbHIpIGZ1bmN0aW9uIGZyb20gYSBuYXRpdmUgY29uc3RydWN0b3Igb3IgZnJvbSBEbGxNYWluLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmFuc29tLmV4eA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmFuc29td2FyZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFNRTF8yMDA4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFNZU1RFTV9CR0M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFRQUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VydmVyJFRQU0FNQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UklQRU1EMTYw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggTUQ1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBLTIyNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBLTI1Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBLTM4NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBLTUxMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBIHdpdGggU0hBMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnNhRW5jcnlwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNBU1NBLVBTUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsVW53aW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnVuZGxsMzIuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZSBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZSBFcnJvciFQcm9ncmFtOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0FWQWRtaW5TZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0FWU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2NodGFza3MuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2NyZWVuY29ubmVjdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDE5Mmsx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDE5MnIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDIyNGsx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDIyNHIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDI1Nmsx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDI1NnIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDM4NHIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VjcDUyMXIx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VwTWFzdGVyU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VwdGVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIG51bWJlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VyaWFsTnVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RXJyb3JNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXJFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0S2VybmVsT2JqZWN0U2VjdXJpdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvY2Vzc1ByaW9yaXR5Qm9vc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvY2Vzc1NodXRkb3duUGFyYW1ldGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkQWZmaW5pdHlNYXNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkUHJpb3JpdHlCb29zdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhLTFXaXRoUlNBRW5jcnlwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhMjI0V2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhMjU2V2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhMzg0V2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhNTEyV2l0aFJTQUVuY3J5cHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hFTEwzMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxFeGVjdXRlRXhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hMV0FQSS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hNb25pdG9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hSZWdTZXRVU1ZhbHVlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0lORyBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2luZ2xlIGJsb2NrIG1zZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2wgU2VjdXJpdHkgL2U6ZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U21jU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U250cFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3MgTlRcQ3VycmVudFZlcnNpb25cU3lzdGVtUmVzdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcUG9saWNpZXNcTWljcm9zb2Z0XFdpbmRvd3MgTlRcU3lzdGVtUmVzdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEFnZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEF1dG9VcGRhdGUgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIENsZWFuIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIERldmljZSBDb250cm9sIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEZpbGUgU2Nhbm5lciBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIEhlYWx0aCBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIE1DUyBBZ2VudA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIE1DUyBDbGllbnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIE1lc3NhZ2UgUm91dGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFNhZmVzdG9yZSBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFN5c3RlbSBQcm90ZWN0aW9uIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29waG9zIFdlYiBDb250cm9sIFNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c29waG9zc3Bz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3FiY29yZXNlcnZpY2Uu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMIEJhY2t1cHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkQktVUEVYRUM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkQ0lUUklYX01FVEFGUkFNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkQ1hEQg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkRUNXREIy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkUFJBQ1RUSUNFQkdD","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkUFJBQ1RUSUNFTUdU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkUFJPRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkUFJPRlhFTkdBR0VNRU5U","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU0JTTU9OSVRPUklORw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU0hBUkVQT0lOVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU09QSE9T","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU1FMXzIwMDg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU1FMRVhQUkVTUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkU1lTVEVNX0JHQw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkVFBT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkVFBTQU1B","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkVkVFQU1TUUwyMDA4UjI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQWdlbnQkVkVFQU1TUUwyMDEy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMQnJvd3Nlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMc2FmZSBCYWNrdXAgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMc2FmZSBGaWx0ZXIgU2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMU2FmZU9MUlNlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMU0VSVkVSQUdFTlQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMVEVMRU1FVFJZ","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMVEVMRU1FVFJZJEVDV0RCMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1FMV3JpdGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyQ2F0QnVmZkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRnJvbUdVSUQy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdCBBbHQgTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3VibGltZV90ZXh0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3ZjR2VuZXJpY0hvc3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3dpX2ZpbHRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3dpX3NlcnZpY2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3dpX3VwZGF0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3dpX3VwZGF0ZV82NA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3dpdGNoVG9UaHJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3ltYW50ZWMgU3lzdGVtIFJlY292ZXJ5","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3luY3RpbWUu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtVGltZVRvVHpTcGVjaWZpY0xvY2FsVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCQwI0QkMCN0JFA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCQ4I0QkOCN0JA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCRAI0QkQCN0JA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCRII0QkSCN0JCg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCRQI0QkUCN0JDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCRQI0QkUCN0JEg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGFza2xpc3Qu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGJpcmRjb25maWcu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGVhbXZpZXdlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGhlYmF0NjQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGh1bWJzLmRi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGh1bmRlcmJpcmQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZSBTdGFtcGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VExPU1MgZXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VExTIFdlYiBDbGllbnQgQXV0aGVudGljYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VExTIFdlYiBTZXJ2ZXIgQXV0aGVudGljYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJ1ZUtleVNjaGVkdWxlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJ1ZUtleVNlcnZpY2VIZWxwZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VUkwRGV0ZWN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pcXVlIElkZW50aWZpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dW5pcXVlSWRlbnRpZmllcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVJQUVFoIFNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dXNuIGRlbGV0ZWpvdXJuYWwgL0QgQzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW0gQmFja3VwIENhdGFsb2cgRGF0YSBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1CYWNrdXBTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1Ccm9rZXJTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1DYXRhbG9nU3Zj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1DbG91ZFN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1EZXBsb3ltZW50U2VydmljZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1EZXBsb3lTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1FbnRlcnByaXNlTWFuYWdlclN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1IdkludGVncmF0aW9uU3Zj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1Nb3VudFN2Yw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1ORlNTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1SRVNUU3Zj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1UcmFuc3BvcnRTdmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm1jb21wdXRlLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm1jb25uZWN0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm1uYXQuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm13YXJlLXZteC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvck11bHRpcGxlT2JqZWN0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2JhZG1pbi5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2VkbmVzZGF5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2VyZmF1bHQuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2V2dHV0aWwuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldENsb3NlRW51bQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldEVudW1SZXNvdXJjZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldE9wZW5FbnVtVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d25zcHJpbnRmQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V293NjREaXNhYmxlV293NjRGc1JlZGlyZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V293NjRSZXZlcnRXb3c2NEZzUmVkaXJlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JicE82TWtu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVDb25zb2xlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3NwcmludGZX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"V1VTRVIzMi5ETEw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3Zuc3ByaW50ZkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"eGZzc3ZjY29uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wm9vbHogMiBTZXJ2aWNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"WndRdWVyeUluZm9ybWF0aW9uUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"WndVbm1hcFZpZXdPZlNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCQ0I0wkNCN8JFQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCQ8I0wkPCN8JA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCREI0wkRCN8JCQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCRMI0wkTCN8JCw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCRUI0wkVCN8JDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null},{"value":"fCRUI0wkVCN8JEw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.bin","compromised":null,"detection_total":null,"total":null}]},{"name":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe:2844","strings":[{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEQ1OC0tNDQ2MTMzOTA4MTUzMzgxNTM0OTI1Mzg3NTE3MjExMTI4ODc4MDUzOTE5MDEyMjI2ODY3MTA2MzIyMjY0MDY0NTgtMTA5NjE0MjMxOA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sbGVjdCBUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlndXJhdGlvbiBGbGFncw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdUcmFjZUxldmVs","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBQZXJmb3JtYW5jZSBDb3VudGVycw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgQ291bnQgTGltaXQ=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXZlbnRMb2dMZXZlbA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlyc3QgQ291bnRlcg==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R3JlZXRpbmdzLCBUZXhhcyBEZXBhcnRtZW50IG9mIFRyYW5zcG9ydGF0aW9uIVJlYWQgdGhpcyBtZXNzYWdlIENBUkVGVUxMWSBhbmQgY29udGFjdCBzb21lb25lIGZyb20gSVQgZGVwYXJ0bWVudC5Zb3VyIGZpbGVz","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1BUDRTdmM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S2VlcCBMaWJyYXJ5IFJlc2lkZW50","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFubWFuV29ya3N0YXRpb24=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFzdCBDb3VudGVy","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGlicmFyeSBWYWxpZGF0aW9uIENvZGU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWNTaGllbGQ=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T2JqZWN0IExpc3Q=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3BlbiBUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJPcmRlcg==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJQYXRo","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UnBjQ2FjaGVUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U1FNU2VydmljZUxpc3Q=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3VjY2Vzc2Z1bCBGaWxlIERhdGU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VG90YWxJbnN0YW5jZU5hbWU=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXBkYXRpbmc=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlQ29sbGVjdGlvblRocmVhZA==","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V1JTVkM=","type":"Unicode","source":"Runtime Data","process":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"P19fOz8sX19fZ3FfLDks","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"Xz9fXz9fP3Y/X19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]},{"name":"wbadmin.exe:2136","strings":[{"value":"P8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDM4NC0tNzY4MDU0ODgyMTAwMDQ5MjQzNC0xMTIxNzI2MzIzLTE4MTE2NTIzNzItMTUzMjIyNjc3MC00OTgzNDQwMjkxNDc1MDQ0NDU1LTIwNzI4NjYxNDA=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2Vzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVRocm90dGxpbmc=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW11bUFsbG93ZWRBbGxvY2F0aW9uU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"wbadmin.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"cipher.exe:1100","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDM3Qy0tMTI2MjA5MDQ4NS00ODI3NjUxMjkzNzI0MjE4NjUtMTkyOTE2MjkxMTEyMjUwMjU4OTgxMzk0NjY1MjI3Mjg3NTQ5MjA1LTUwOTA1NjExMA==","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"wevtutil.exe:3088","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDREOC01OTk0NzM2Mzg2NjY0NTAwOTYxNTEzMTgzMjExLTEyMDMyNzYyNjUxMTcwNzczNDU4ODg1MDUyMDI5MjA2MDYwNTcwMDEwMTY2NTc2OTQ=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"wevtutil.exe:2964","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDU5Qy0xMzQ1NDM5MzUxLTE1Nzg4NTI1NTUtODg1OTE0MzE4LTE2ODcxODE1NDAxNTkwNTc3MDIzODU4MjYzODEzLTQ0NDQwOTY4MDY0NjkwOTg=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"wevtutil.exe:1272","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDVBMC0tMTM2NzgxNTY1NC04MTI0NjY3OTctMTk4MDg0NTAzOC00MjQyNjc1NTY1MzI2NDIzMDQtMTg2MzQ4NDUxMC0xNjY3MDc3Nzk0LTIwODk1MDA1NDk=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"bcdedit.exe:2632","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDg2Qy0tMjA3NTUyOTY4MS0xNzY0OTQ4NDI3NTEyNTY2OTE5LTE2MjY3OTUxNTItMjA3OTQ0MjA5MC0xMTUyODU2OTczLTE4NTM2MDMwNjUtMTY3MjYxNjA3NQ==","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"cipher.exe:3128","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDlEMC0yNTUxMzQ3NTUtOTgyNDQ0NTktMTUwNzkxMTc5Ny0xMjQ5NDQwMzQwOTEwOTYyOTkzLTE3MTUzOTUwOTUtMTIwMTIzMjA4ODE2MzA2MjY1MTM=","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"wevtutil.exe:2820","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEEzNC0zNDM1Nzc2MTUxODA2NDEyODMtMTI5NzM4NTQ5Ny04MzMxNjk2OTAzOTE3MDk5ODkxOTU4NjcwODgtMTg1NjY5NzcxOTI4NzA3MjM4NQ==","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"fsutil.exe:380","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEE0NC0xNTQ4NDYzNTg0LTU3Mzg4MDk1NjE1OTczMDk1MTEzMzYzMDY1NjctMTgyNzg5MTg5OTg4ODA0MjA4Ni0xNjMzOTgwMjkwMTYwNDE2Njk1Nw==","type":"Unicode","source":"Runtime Data","process":"fsutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"bcdedit.exe:3516","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEE3Qy0tNDU2NTczNDE4LTIwNDA3NzcxMzktMTMyOTYzNTExNi0xNjUyNDM4NjE1MjEyNjc2MTA4MjkzNTY5NTk0Mjc3MjU3MTYzNy0xMjY1NjM2Njgy","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU3RhcnRPcHRpb25z","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJlYXRBc1N5c3RlbQ==","type":"Unicode","source":"Runtime Data","process":"bcdedit.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"schtasks.exe:2908","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEIxMC00MjI2NTIyNjY2NDU4NzYwMTIxOTUzNTMxMjYyLTE2Mjk2MjcwODQ0OTMzNzgyODcxOTMwNDAzMDIzLTk1NTUzOTA1NDU4NzQyODU2Mg==","type":"Unicode","source":"Runtime Data","process":"schtasks.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"wevtutil.exe:1476","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEY3OC0tMTYwOTA5NjgzNy00NTE2NzYxNDktODc5Nzg2MjkxNzMxMDU4MDk4LTEzNDYxNjg0MzM2MzUwOTU1ODc1OTQzODc1Mi03OTQ1NjY3NjU=","type":"Unicode","source":"Runtime Data","process":"wevtutil.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"cipher.exe:4000","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMEZDQy0tMTU5MTgxNjM4Ny0xNTgwNjA2ODA3LTE0OTc5NzY3NDYxNDkwNDc5MzMzMzI3Njk3OTI3LTE4MjIzNzE4MzYxNzIxMDQxNzc0LTE2MDQ0MDU1NjI=","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdIZWFwRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"cipher.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"screen_1.png","strings":[{"value":"Y19cNGNhXzkwU09fN2I3YWE3NDMxNDE3M2M3X2Q0MDllYWJmZVViODY4czlmM2IzYWNlZF8xbzRTOC5fZQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_1.png","compromised":null,"detection_total":null,"total":null}]},{"name":"wevtutil.exe","strings":[{"value":"Y2wgU2V0dXA=","type":"Ansi","source":"Process Commandline","process":null,"filename":"wevtutil.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"!TXDOT_READ_ME!.txt","strings":[{"value":"Q29udGFjdCB1cyBPTkxZIGlmIHlvdSBvZmZpY2lhbGx5IHJlcHJlc2VudCB0aGUgd2hvbGUgYWZmZWN0ZWQgbmV0d29yay4=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"RW5jcnlwdGVkIGZpbGUgU0hPVUxEIE5PVCBjb250YWluIHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiAodGVjaG5pY2FsLCBiYWNrdXBzLCBkYXRhYmFzZXMsIGxhcmdlIGRvY3VtZW50cyku","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"R3JlZXRpbmdzLCBUZXhhcyBEZXBhcnRtZW50IG9mIFRyYW5zcG9ydGF0aW9uIQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"SW5mcmFzdHJ1Y3R1cmUgcmVidWlsZCB3aWxsIGNvc3QgeW91IE1VQ0ggbW9yZS4=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"TWFpbCB1czogdHhkb3Q5MTFAcHJvdG9ubWFpbC5jb20=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":0,"total":79},{"value":"TU9ESUZJQ0FUSU9OIG9yIFJFTkFNSU5HIGVuY3J5cHRlZCBmaWxlcyBtYXkgY2F1c2UgZGVjcnlwdGlvbiBmYWlsdXJlLg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gdGhpcmQgcGFydHkgZGVjcnlwdGlvbiBzb2Z0d2FyZSBFWElTVFMu","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZCB0aGlzIG1lc3NhZ2UgQ0FSRUZVTExZIGFuZCBjb250YWN0IHNvbWVvbmUgZnJvbSBJVCBkZXBhcnRtZW50Lg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"c28geW91IGhhdmUgbm8gZG91YnRzIGluIHBvc3NpYmlsaXR5IHRvIHJlc3RvcmUgYWxsIGZpbGVzIGZyb20gYWxsIGFmZmVjdGVkIHN5c3RlbXMgQU5ZIFRJTUUu","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"U3BlYWsgRU5HTElTSCB3aGVuIGNvbnRhY3RpbmcgdXMu","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIE9OTFkgYXR0YWNobWVudHMgd2UgYWNjZXB0IGFyZSBub24gYXJjaGl2ZWQgZW5jcnlwdGVkIGZpbGVzIGZvciB0ZXN0IGRlY3J5cHRpb24u","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFBSSUNFIGRlcGVuZHMgb24gaG93IHF1aWNrbHkgeW91IGRvIGl0Lg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHJlc3Qgb2YgZGF0YSB3aWxsIGJlIGF2YWlsYWJsZSBhZnRlciB0aGUgUEFZTUVOVC4=","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"V2Uga2luZGx5IGFzayB5b3Ugbm90IHRvIHVzZSBHTUFJTCwgWUFIT08gb3IgTElWRSB0byBjb250YWN0IHVzLg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"WW91IGNhbiBzZW5kIHVzIGFuIGVuY3J5cHRlZCBmaWxlIChub3QgZ3JlYXRlciB0aGFuIDQwMEtCKSBhbmQgd2Ugd2lsbCBkZWNyeXB0IGl0IEZPUiBGUkVFLA==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"WW91ciBmaWxlcyBhcmUgc2VjdXJlbHkgRU5DUllQVEVELg==","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null},{"value":"$35","type":"Ansi","source":"Dropped File","process":null,"filename":"!TXDOT_READ_ME!.txt","compromised":null,"detection_total":null,"total":null}]}],"image":[]},"http_requests":[],"ftp_requests":[],"irc_requests":[],"strings_resources":["http://ntdetect.com","http://protonmail.com"],"tags_details":[],"sample_flags":["Extracted Files"],"suricata_alerts":[],"version_info":[],"apk_info":null,"apps_info":[{"name":"Access","product":null,"version":null},{"name":"Acrobat Reader","product":"Adobe Acrobat Reader DC","version":"18.11.20038.267465"},{"name":"Chrome","product":null,"version":null},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.4756.1000"},{"name":"Firefox","product":"Firefox","version":"57.0.1"},{"name":"Flash","product":"Shockwave Flash","version":"27,0,0,187"},{"name":"Hancom Office Hancell","product":"Hancom Office Hancell 2010","version":"8, 5, 8, 1207"},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.9600.16428"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1510.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.4763.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.4754.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.4762.1000"}],"architecture":"32 Bit","document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":null,"file_imports":[{"module":"ADVAPI32.dll","functions":["CloseServiceHandle","ControlService","CryptAcquireContextA","CryptAcquireContextW","CryptCreateHash","CryptDestroyHash","CryptGenRandom","CryptGetHashParam","CryptHashData","CryptReleaseContext","GetTokenInformation","GetUserNameA","OpenProcessToken","OpenSCManagerA","OpenServiceW","QueryServiceStatusEx","RegQueryValueExA","SetKernelObjectSecurity"]},{"module":"KERNEL32.dll","functions":["CloseHandle","CreateEventA","CreateFileW","CreateMutexW","CreateThread","CreateToolhelp32Snapshot","DecodePointer","DeleteCriticalSection","DeleteFileA","EncodePointer","EnterCriticalSection","ExitProcess","FileTimeToSystemTime","FindClose","FindFirstFileA","FindFirstFileW","FindNextFileA","FindNextFileW","FlushFileBuffers","GetACP","GetComputerNameA","GetConsoleCP","GetConsoleMode","GetCPInfo","GetCurrentProcess","GetCurrentProcessId","GetCurrentThread","GetCurrentThreadId","GetEnvironmentVariableA","GetEnvironmentVariableW","GetFileSizeEx","GetLastError","GetLogicalDriveStringsW","GetModuleFileNameA","GetModuleFileNameW","GetModuleHandleA","GetModuleHandleW","GetNativeSystemInfo","GetOEMCP","GetProcAddress","GetProcessHandleCount","GetProcessHeap","GetProcessTimes","GetStdHandle","GetStringTypeW","GetSystemDirectoryW","GetSystemInfo","GetSystemTime","GetSystemTimes","GetSystemWindowsDirectoryA","GetSystemWindowsDirectoryW","GetTickCount","GetVersionExW","GetVolumeInformationA","HeapAlloc","HeapFree","HeapReAlloc","InitializeCriticalSectionAndSpinCount","InterlockedDecrement","InterlockedIncrement","IsDebuggerPresent","IsProcessorFeaturePresent","IsValidCodePage","LCMapStringW","LeaveCriticalSection","LoadLibraryW","lstrcpynA","lstrlenA","MoveFileExA","MoveFileW","MultiByteToWideChar","OpenProcess","Process32First","Process32FirstW","Process32Next","Process32NextW","ReadFile","RemoveDirectoryA","RtlUnwind","SetErrorMode","SetEvent","SetFileAttributesA","SetFileAttributesW","SetFilePointer","SetFilePointerEx","SetLastError","SetProcessPriorityBoost","SetProcessShutdownParameters","SetStdHandle","SetThreadAffinityMask","SetThreadPriorityBoost","SetUnhandledExceptionFilter","Sleep","SwitchToThread","SystemTimeToTzSpecificLocalTime","TerminateProcess","TlsGetValue","TlsSetValue","UnhandledExceptionFilter","WaitForMultipleObjects","WaitForSingleObject","WideCharToMultiByte","Wow64DisableWow64FsRedirection","Wow64RevertWow64FsRedirection","WriteConsoleW","WriteFile"]},{"module":"MPR.dll","functions":["WNetCloseEnum","WNetEnumResourceW","WNetOpenEnumW"]},{"module":"NETAPI32.dll","functions":["NetApiBufferFree","NetServerGetInfo","NetWkstaGetInfo"]},{"module":"ntdll.dll","functions":["ZwQueryInformationProcess","ZwUnmapViewOfSection"]},{"module":"ole32.dll","functions":["StringFromGUID2"]},{"module":"PSAPI.DLL","functions":["GetModuleFileNameExW"]},{"module":"SHELL32.dll","functions":["ShellExecuteExW","SHGetFolderPathW"]},{"module":"SHLWAPI.dll","functions":["PathAddBackslashA","PathAppendA","PathFileExistsW","PathFindExtensionW","PathFindFileNameA","PathFindFileNameW","PathIsDirectoryA","SHRegSetUSValueA","StrCatBuffA","StrCatW","StrCmpIW","StrCmpW","StrCpyNW","StrCpyW","StrNCatW","StrStrIA","StrStrIW","wnsprintfA","wvnsprintfA"]},{"module":"USER32.dll","functions":["CharLowerA","CharUpperA","wsprintfW"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[],"language":null,"authentihash":"e3f8393e68340aa48e0af1f8445148da60a245ea3794e255d516ab803234a2ba","entrypoint_bytes":null,"pdb_timestamp":null,"pdb_pathway":null,"pdb_guid":null,"file_sections":[{"name":".text","entropy":6.81224909292,"virtual_address":"0x1000","virtual_size":"0x176d2","raw_size":"0x17800","md5":"9c36add76aebd05592fdb8d0ceb023bc","characteristics":[]},{"name":".rdata","entropy":5.23903161273,"virtual_address":"0x19000","virtual_size":"0x9869","raw_size":"0x9a00","md5":"94e42663afda4e8629b33e1eaff78801","characteristics":[]},{"name":".data","entropy":3.35950440728,"virtual_address":"0x23000","virtual_size":"0x7f24","raw_size":"0x2400","md5":"c0d9d446325b63763831e52606b478a8","characteristics":[]},{"name":".reloc","entropy":5.20421980032,"virtual_address":"0x2b000","virtual_size":"0x26f8","raw_size":"0x2800","md5":"9237f380cb25c36b294bded4d14d08c3","characteristics":[]}],"file_exports":[{"name":"?ReflectiveLoader@@YGKPAX@Z","ordinal":1,"address":"0x403b50"}],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[],"email_headers":null,"classification_tags":[],"tags":[],"submissions":[{"submission_id":"5ef8c95cb341906b3e26063f","filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","url":null,"created_at":"2020-06-28T16:46:20+00:00"},{"submission_id":"5ef8c94e41a80103a733e72f","filename":"4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","url":null,"created_at":"2020-06-28T16:46:06+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Enforcing malicious verdict, as a reliable source indicates high confidence","Not all Falcon MalQuery lookups completed in time","Not all sources for indicator ID \"api-25\" are available in the report","Not all sources for indicator ID \"api-55\" are available in the report","Not all sources for indicator ID \"api-77\" are available in the report","Not all sources for indicator ID \"binary-0\" are available in the report","Not all sources for indicator ID \"mutant-0\" are available in the report","Not all sources for indicator ID \"string-0\" are available in the report","Some low-level data is hidden, as this is only a slim report"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5ef8c94e41a80103a733e72e/download/files/report_json","file_size":651705},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5ef8c94e41a80103a733e72e/download/files/memory_strings","file_size":9528},"certificate":null,"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5ef8c94e41a80103a733e72e/download/files/network_pcap","file_size":10367},"memory_dumps":null},"system_resource_monitor":{"cpu_usage":[{"x":0,"y":98.9453},{"x":1,"y":98.8346},{"x":2,"y":99.3377},{"x":3,"y":98.9843},{"x":4,"y":99.2178},{"x":5,"y":98.9283},{"x":6,"y":99.3628},{"x":7,"y":98.8581},{"x":8,"y":99.1406},{"x":9,"y":98.8542},{"x":10,"y":98.7852}],"memory_usage":[{"x":0,"y":13.2532},{"x":1,"y":14.0541},{"x":2,"y":14.0697},{"x":3,"y":14.1102},{"x":4,"y":14.1254},{"x":5,"y":13.7795},{"x":6,"y":14.3669},{"x":7,"y":14.2413},{"x":8,"y":13.7248},{"x":9,"y":13.6242},{"x":10,"y":13.5578}],"disk_read":[{"x":0,"y":218743},{"x":1,"y":21080100},{"x":2,"y":54497300},{"x":3,"y":42770100},{"x":4,"y":43145300},{"x":5,"y":45771600},{"x":6,"y":12553300},{"x":7,"y":5774790},{"x":8,"y":6409020},{"x":9,"y":8421530},{"x":10,"y":5986420}],"disk_write":[{"x":0,"y":1154030},{"x":1,"y":15021400},{"x":2,"y":45491700},{"x":3,"y":41431200},{"x":4,"y":37482100},{"x":5,"y":41698600},{"x":6,"y":31210700},{"x":7,"y":48496900},{"x":8,"y":46167200},{"x":9,"y":47530600},{"x":10,"y":49060900}],"network_packets":[{"x":0,"y":9.70075},{"x":1,"y":3.69997},{"x":2,"y":10.2892},{"x":3,"y":4.00005},{"x":4,"y":14.4006},{"x":5,"y":49.2662},{"x":6,"y":11.1999},{"x":7,"y":32.6991},{"x":8,"y":25.9685},{"x":9,"y":14.1003},{"x":10,"y":4.89993}],"page_file":[{"x":0,"y":243601000},{"x":1,"y":266371000},{"x":2,"y":266633000},{"x":3,"y":266658000},{"x":4,"y":266883000},{"x":5,"y":264262000},{"x":6,"y":271905000},{"x":7,"y":271106000},{"x":8,"y":249881000},{"x":9,"y":245961000},{"x":10,"y":246874000}]},"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","4fadb9b629e3d1c290aef74c69e172abf9184d2bd5568ad4e3612370d6235563","1c1bf86e140a95fffb22aaca5539946451c974947597c928bfd9f927080a7abc","7971f869259aee9bd631bba70e10a49cf66fea3ac7fd16126a064111f87da460","fed7c3840fa32b5ecced59d345bef4cbf605377dcb4de73466ff37d325f1c665","67036675b8e19037591689158e21b03fa97de0298518b8fe961713e6ac8d8116","4c948e1c3ed7b64eda21e0d8307ee19d5b79ea4747931ba37f837a8c6d3c32e0","867c4bf440fcf7b20d1ba728d96f8225175068aec1fb1d0199f9ef57d35f7012","2924ac2e4ad573a45df3dcac6599a9f691c6952500ae9d43fa62690500cba829","b8694f32b6901592b349f5d34d9369b9e85575548f6ab4bb44ac3c875f521607","e2fffaa2c5ad30075cbe9bf51140cd4f3dc8e44eb3143c5fd00cd579704227ed","24c5272c0953466fe092efc24920f5d55102d12e9a22179f414dea208fb55eac","c138162127b9b13f29c4e73ea03cc7907a19bb6a51fdfa325fca62a739d40125","7fdd979e3af40df646e0549184714e3f0fa80025aa7ca1aa595bd7edcfe891f8","917c8c65a76e1411f5b3022386c8127ad821758cfa494c8bb38c8aa159408494","9eaa4ee40fb95a8d51313d94a1a7e0a6d6de16f52d2a78be41c0bc3e918fe71c","a192e06aaa5a408ba43e9a942d7a394dc2df22ee32f81ee1b3acd5591dcd02b3","cc2817662d3ed7915c04e304eb6156f81946023b558b35c5bf4e8d806c8a99b0","57ece8148d22a20fbf6a682cb65ccbb76b6f18b09be09c41a9bb34bcd7b456b9","4a873e63f0c78722953f0b88f87624434a6fb81d7460f940c14c5492b7a78755","141840cae84ccb9d1f595d392200fb3a0110a88bc479c9e6bc4952223a9bf406","d8df2667eb1784ddc11350425a87f7e18e6ed37cc28ba7621bf12493410b37d4","310d779f157824db96f828d95c29668d99bf25166c655bcd3d6408bf12ec22dc","55c057153931baf9bcc4599f49853e039bb38c92cc960cc4c222a859c78c4d0d","29fc2b8e71d05959437889e374381c2969e6394d8d1f3298c361b76329f34a76","52a595a7cd516a1cbceec0a5e73981722f6c33d60ee452bb3ae8e239600eab4e","382cfb6adc18f17978fcadff8490713ff1544004e5e6ffbd51f79eed8459799d","a123ce03203f4710af686c497d98903146e29f2be1325f3d6725fd1ed1239ae2","c5f6929cb67111568c1ad0d0046b34832e0e07358f83d81239ffd381aecf7565","a1a4b13221d842e365ed72cf3f7213446c5515353482f268c03a2e4b87eefb8b","f7bfc9bd7beebf35dd942d0e77d656d05111c9e68740c8ff2a0f23f20b573c2f","a8e69bb95570491815a7c577c48482ad9c5fdd119523433ee7ebd2e5675c479b","84407e8413e05122dea542bdb6ca8ddd59d72272a4c9f59731ff9b6542155760","e6d629d10ad77dc8139aac946d02ce5839866952babf57614f9457eabdde893b","82cbbff361398325a68f01efb461594725506dbf5e3a6116fe321c8fecae01e3","680e4955e33be6e1c3cd01fbcbe42dc32a25d10bbf3a3cd9a63e9703009b3873","129871a21843f5aad93f3c4296015e4e83903585094955c46dd3b3a094e84534","de5d13d5d87b5e35871c5e4706729f7bc1cfb0fa148be4f859712cb0ae5fc194","db68183d45c21d5055b02feaa7c341e7d4a211b915ec86ab8c48843c943d9aa9","5f9d1b7bc182b88221263eb861e2710004d7b0cfe38e355d167b5c510f959643","4b62adc1507f9760556b21eab70755959e82f7e00723ae2a42264f3b65cc5a39","ed7ba238d7f476fbdf117d0ae723213ed9d789e46217ce655a10dbaeb4df6b60","cd9ff170e1ee8ad48cb9ac7d926ca30e02b397fa0e996fa8ff0830bbcb7e1b42","1a7ba3959aa1cfbff29104e6699df712b3a92612b2d62ccb857793f850f71937","4fe2db07766f07c899a6a15ca95b4913d708820eeaad64f4b1b63d7abbfa4f84","eb7aaef31da4d4a885e63e453a856883207adbcb27929003668c3d1eb27d8744","a8400a5eba3c8463065984b8656b274a47b96278a7949abb9d7c1bb1ff4fff8c","c40e98038feb933ce4ae36cfd488d32ab912a788fc722b68470dfa721e8990e7","b889a2f4edc93b2f3c962756d53bfdedf20b906eca7e44f7768fdb16c6b424de","5531125705058e5a3dedf95ec11d8f76ec01b81c583f1f151ab659d47becaf9f","22b6d2772a9aa72cc47a7d1087ed67df984db320a1c8e836165362b13a4ce12d","374a645c36d27bd175c46c3735449422059c0a9b29d33ecb067e3710ced67f43","680eca1885ec56740f8a7cde4cefc3f87e245cd6bfbcb48050d378997154d507","c2a1f60888b6279b2aecada6c9fcbeea74303d1e9c1de03eb3147f272b495d99","bc65567847272489019a9de6332e3dadcd186dacf0c8335254777aef45545d99","9cc93759cdf0f9e80a1c6cb2a8b44e358bc42bd372283d537271e1cbc998bf4d","b40a29635806815f70b88abdd064fe0d475a051988516ec2dd25de8c4c95525c","fc2e9a6bd3272c12d78182bd9b422a72f5d16a81a9ab579b379db84cda116a70","8635eed824fe3cc09f75dd33986d06312375e190279662c2b15c2a8fcbd4a136","f004033c022bb2c6bd2a73442465ab01c487f2d0ebe022da948f2c76fdd2b96d","3cbe6465b1a44ea1730b5f610f9343e0c71376d9da997f1fdf4feb1c69b28fb2","2aa8c68ba039f93de0aa0e8d304280003d3eb42cf5d6b4615fcb191d317edc1e","f796b21c6788f3777514941cba87637200232c6c781095d230083058c1bd84c3","6cbd46a666805d7ae45d65f49699eaca12bd938b83bc34d4b257e83275560b68","aa090b674ad5a39dbb010ce6e3a2b8bb19b084dd32a346742062e3adfa7c3c51","6d1b7029d64f022392078dd4eb3ba7fd706d02997e96c544db5682cd356a809c","be527c6085cd944097de35b9740fc4dd24d455567bec596e9cc300d70c5a392d","e5bc427ba84627fa84861c54044df8ac3c3b3c3ed3d007265c6b18f588d0ca8a","c516c131d30436f8170a5a342b576bb82043576bc2be5d1fdc5a19d482016604","15018d0093befabba8b927743191030d1f8c17bb97fdb48c2fc3eab20e2d4b3d"]}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Gen:Heur.Ransom.Imps — Falcon Sandbox Report — Score 100/100 — Sample 4cae449450c0… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sandbox report 5ef8c94e41a8…. Malware family: Gen:Heur.Ransom.Imps. Threat score 100/100. 11 malicious and 14 suspicious behavioral indicators across 47 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458/5ef8c94e41a80103a733e72e"}],["$","meta","4",{"property":"og:title","content":"Malicious Gen:Heur.Ransom.Imps — Falcon Sandbox Report — Score 100/100 — Sample 4cae449450c0… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sandbox report 5ef8c94e41a8…. Malware family: Gen:Heur.Ransom.Imps. Threat score 100/100. 11 malicious and 14 suspicious behavioral indicators across 47 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458/5ef8c94e41a80103a733e72e"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Gen:Heur.Ransom.Imps — Falcon Sandbox Report — Score 100/100 — Sample 4cae449450c0… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sandbox report 5ef8c94e41a8…. Malware family: Gen:Heur.Ransom.Imps. Threat score 100/100. 11 malicious and 14 suspicious behavioral indicators across 47 signatures. Detonated in Windows 7 32 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L36","11",{}]]